Staff / Employee Business Directory for Active Directory <= 1.2.1 - Insufficient Escaping of Stored LDAP Values
Strategic Overview
<= 1.2.2CVE-2023-4757Vulnerability Overview
The Staff / Employee Business Directory for Active Directory plugin for WordPress is vulnerable to improper LDAP value escaping in versions up to, and including, 1.2.1. This is due to insufficient escaping on the supplied $user_field_data value. This makes it possible for authenticated attackers with access to edit their LDAP entries to inject malicious JavaScript that will access when a user accesses a page containing the data.
Technical Analysis
REMEDIATION: Update to version 1.2.3, or a newer patched version --- IDENTIFIER: CWE-116 (Improper Encoding or Escaping of Output) The product prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved.
External References
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C