CVE-2024-5020

Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library

Description

Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled FancyBox JavaScript library (versions 1.3.4 to 3.5.7) in various versions due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

References

Link	Tags
https://www.wordfence.com/threat-intel/vulnerabilities/id/d99d4b9a-aa09-434d-91a8-7afaa0e8b5db?source=cve
https://plugins.trac.wordpress.org/changeset/3150376/woo-smart-quick-view
https://plugins.trac.wordpress.org/changeset/3153081/colibri-page-builder
https://plugins.trac.wordpress.org/changeset/3157076/nextgen-gallery
https://plugins.trac.wordpress.org/changeset/3158415/envira-gallery-lite
https://plugins.trac.wordpress.org/changeset/3156791/form-maker
https://plugins.trac.wordpress.org/changeset/3160432/visual-portfolio
https://plugins.trac.wordpress.org/changeset/3161422/fv-wordpress-flowplayer
https://plugins.trac.wordpress.org/changeset/3160232/easy-fancybox
https://plugins.trac.wordpress.org/changeset/3161892/wp-carousel-free
https://plugins.trac.wordpress.org/changeset/3173097/responsive-lightbox
https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3175577%40getwid%2Ftrunk&old=3119180%40getwid%2Ftrunk&sfp_email=&sfph_mail=
https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3186301%40fancybox-for-wordpress%2Ftrunk&old=3058912%40fancybox-for-wordpress%2Ftrunk&sfp_email=&sfph_mail=
https://plugins.trac.wordpress.org/changeset/3169926/accordion-slider

Frequently Asked Questions

What is the severity of CVE-2024-5020?: CVE-2024-5020 has been scored as a medium severity vulnerability.
How to fix CVE-2024-5020?: To fix CVE-2024-5020, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2024-5020 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2024-5020 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2024-5020?: CVE-2024-5020 affects extendthemes Colibri Page Builder, smub Gallery Plugin for WordPress – Envira Photo Gallery, bqworks Accordion Slider, 10web Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder, jetmonsters Getwid – Gutenberg Blocks, firelightwp Firelight Lightbox, dfactory Responsive Lightbox & Gallery, shapedplugin Carousel, Slider, Gallery by WP Carousel – Image Carousel with Lightbox & Photo Gallery, Video Slider, Post Carousel & Post Grid, Product Carousel & Product Grid, colorlibplugins FancyBox for WordPress, nko Visual Portfolio, Photo Gallery & Post Grid, smub Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery, wpclever WPC Smart Quick View for WooCommerce, Easy Social Feed Easy Social Feed Premium, foliovision FV Flowplayer Video Player.

Description

Category

CWE-79 – Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References

Frequently Asked Questions