CVE-2022-2654

Classima < 2.1.11 - Reflected Cross-Site Scripting

Severity Score

6.1

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The Classima WordPress theme before 2.1.11 and some of its required plugins (Classified Listing before 2.2.14, Classified Listing Pro before 2.0.20, Classified Listing Store & Membership before 1.4.20 and Classima Core before 1.10) do not escape a parameter before outputting it back in attributes, leading to Reflected Cross-Site Scripting

El tema Classima de WordPress versiones anteriores a 2.1.11 y algunos de sus plugins necesarios (Classified Listing versiones anteriores a 2.2.14, Classified Listing Pro versiones anteriores a 2.0.20, Classified Listing Store & Membership versiones anteriores a 1.4.20 y Classima Core versiones anteriores a 1.10) no escapan un parámetro antes de devolverlo en atributos, conllevando a una taque de tipo Cross-Site Scripting Reflejado

The Classima theme for WordPress is vulnerable to Reflected Cross-site Scripting in versions up to 2.1.11 due to insufficient input sanitization and output escaping on the 'q' parameter. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. This also affects the Classified Listing plugin before 2.2.14, Classified Listing Pro plugin before 2.0.20, Classified Listing Store & Membership plugin before 1.4.20 and Classima Core plugin before 1.10

*Credits: Team ISH Tecnologia (Thiago Martins, Jorge Buzeti, Leandro Inacio, Lucas de Souza, Matheus Oliveira, Filipe Baptistella, Leonardo Paiva, Jose Thomaz, Joao Maciel, Vinicius Pereira, Geovanni Campos, Hudson Nowak, Guilherme Acerbi) and Islan Ferreira.

CVSS Scores

NISTv3.1 6.1

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2022-08-04 CVE Reserved
2022-08-22 CVE Published
2024-04-08 EPSS Updated
2024-08-03 CVE Updated
2024-08-03 First Exploit
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CAPEC

References (1)

URL	Tag	Source

URL	Date	SRC
https://wpscan.com/vulnerability/845f44ca-f572-48d7-a19a-89cace0b8993	2024-08-03

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Radiustheme Search vendor "Radiustheme"		Classified Listing - Classified Ads \& Business Directory Search vendor "Radiustheme" for product "Classified Listing - Classified Ads \& Business Directory"				< 2.2.14 Search vendor "Radiustheme" for product "Classified Listing - Classified Ads \& Business Directory" and version " < 2.2.14"		wordpress		Affected
Radiustheme Search vendor "Radiustheme"		Classified Listing Pro - Classified Ads \& Business Directory Search vendor "Radiustheme" for product "Classified Listing Pro - Classified Ads \& Business Directory"				< 2.0.20 Search vendor "Radiustheme" for product "Classified Listing Pro - Classified Ads \& Business Directory" and version " < 2.0.20"		wordpress		Affected
Radiustheme Search vendor "Radiustheme"		Classified Listing Store \& Membership Search vendor "Radiustheme" for product "Classified Listing Store \& Membership"				< 1.4.20 Search vendor "Radiustheme" for product "Classified Listing Store \& Membership" and version " < 1.4.20"		wordpress		Affected
Radiustheme Search vendor "Radiustheme"		Classima Search vendor "Radiustheme" for product "Classima"				< 2.1.11 Search vendor "Radiustheme" for product "Classima" and version " < 2.1.11"		wordpress		Affected
Radiustheme Search vendor "Radiustheme"		Classima Core Search vendor "Radiustheme" for product "Classima Core"				< 1.10 Search vendor "Radiustheme" for product "Classima Core" and version " < 1.10"		wordpress		Affected