Ditty 3.1.39-3.1.45 – Author+ Stored XSS | CVE 2024-6715 | Plugin Vulnerabilities

Description

The plugin re-introduced a previously fixed security issue (https://wpscan.com/vulnerability/80a9eb3a-2cb1-4844-9004-ba2554b2d46c/) in v3.1.39

Proof of Concept

1. Edit/Add a Ditty
2. In the menu on the right, click "Add Default"
3. Put the following payload in the Content Title field:
  From 3.1.45 => &lt;img src onerror=alert(`XSS`)&gt;
  From 3.1.39 until 3.1.44 => &amp;lt;img src onerror=alert(`XSS`)&amp;gt;
4. Click save and then reload to trigger the XSS

Affects Plugins

ditty-news-ticker

Fixed in 3.1.46

References

CVE

Classification

Type

XSS

OWASP top 10

A7: Cross-Site Scripting (XSS)

CWE

CVSS

Miscellaneous

Original Researcher

Erwan LR (WPScan)

Submitter

Erwan LR (WPScan)

Verified

Yes

WPVDB ID

19406acc-3441-4d4a-9163-ace8f1dceb78

Timeline

Publicly Published

2024-08-02 (about 1 year ago)

Added

2024-08-02 (about 1 year ago)

Last Updated

2024-08-02 (about 1 year ago)

Other

Published

Title

Published

2023-07-26

Title

User Email Verification for WooCommerce <= 3.5.0 - Reflected XSS

Published

2015-08-13

Title

All In One WP Security & Firewall <= 3.9.7 - Unauthenticated Cross-Site Scripting (XSS)

Published

2017-07-26

Title

Ultimate Affiliate Pro WordPress Plugin < 4.0 - Authenticated Stored XSS

Published

2024-12-02

Title

Element Pack Elementor Addons < 5.10.6 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Lightbox Widget

Published

2024-04-25

Title

GS Pins for Pinterest < 1.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shorcode