Executive Summary

The rexCrawler plugin for WordPress has a Stored Cross-Site Scripting (XSS) vulnerability in all versions up to and including 1.0.15. This vulnerability arises because the plugin does not properly sanitize input or escape output in the admin settings.

Authenticated users with administrator-level permissions or higher can exploit this flaw to inject arbitrary web scripts into pages. These scripts will execute whenever any user accesses the injected page.

This vulnerability specifically affects multi-site WordPress installations or installations where the unfiltered_html setting is disabled.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can allow attackers with admin privileges to inject malicious scripts that execute in the context of other users visiting the affected pages.

Such script execution can lead to theft of user credentials, session hijacking, defacement, or other malicious actions depending on the injected script.

Because the vulnerability requires administrator-level access, it primarily impacts environments where such access might be compromised or misused.

Useful 0 Not Useful 0

Compliance Impact

The vulnerability allows authenticated administrators to inject arbitrary web scripts that execute when users access affected pages, potentially leading to unauthorized access or manipulation of data.

Such stored cross-site scripting (XSS) vulnerabilities can compromise the confidentiality and integrity of user data, which may impact compliance with data protection regulations like GDPR and HIPAA that require safeguarding personal and sensitive information.

However, the specific impact on compliance depends on the context of the affected installation and whether sensitive data is exposed or compromised through this vulnerability.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, ensure that you update the rexCrawler plugin for WordPress to a version later than 1.0.15 where the issue is fixed.

Additionally, restrict administrator-level permissions carefully since only authenticated users with such permissions can exploit this vulnerability.

If you are running a multi-site installation or have disabled unfiltered_html, consider re-enabling unfiltered_html if possible, as the vulnerability only affects installations where it is disabled.

Useful 0 Not Useful 0