Vulnerabilities > CVE-2023-4294 - Unspecified vulnerability in Kaizencoders URL Shortify

CVSS 6.1 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

kaizencoders

NVD

Published: 2023-09-11

Updated: 2023-11-07

Summary

The URL Shortify WordPress plugin before 1.7.6 does not properly escape the value of the referer header, thus allowing an unauthenticated attacker to inject malicious javascript that will trigger in the plugins admin panel with statistics of the created short link.

Vulnerable Configurations

Part	Description	Count
Application	Kaizencoders Kaizencoders URL Shortify - Kaizencoders URL Shortify 1.0.0 Kaizencoders URL Shortify 1.0.1 Kaizencoders URL Shortify 1.0.2 Kaizencoders URL Shortify 1.0.3 Kaizencoders URL Shortify 1.0.4 Kaizencoders URL Shortify 1.1.0 Kaizencoders URL Shortify 1.1.1 Kaizencoders URL Shortify 1.1.2 Kaizencoders URL Shortify 1.1.3 Kaizencoders URL Shortify 1.1.4 Kaizencoders URL Shortify 1.1.5 Kaizencoders URL Shortify 1.1.6 Kaizencoders URL Shortify 1.1.6.1 Kaizencoders URL Shortify 1.1.7 Kaizencoders URL Shortify 1.1.8 Kaizencoders URL Shortify 1.1.9 Kaizencoders URL Shortify 1.2.0 Kaizencoders URL Shortify 1.2.2 Kaizencoders URL Shortify 1.2.3 Kaizencoders URL Shortify 1.2.4 Kaizencoders URL Shortify 1.2.5 Kaizencoders URL Shortify 1.2.6 Kaizencoders URL Shortify 1.2.7 Kaizencoders URL Shortify 1.2.8 Kaizencoders URL Shortify 1.2.9 Kaizencoders URL Shortify 1.2.10 Kaizencoders URL Shortify 1.2.11 Kaizencoders URL Shortify 1.2.12 Kaizencoders URL Shortify 1.2.13 Kaizencoders URL Shortify 1.2.14 Kaizencoders URL Shortify 1.2.15 Kaizencoders URL Shortify 1.2.16 Kaizencoders URL Shortify 1.3.0 Kaizencoders URL Shortify 1.3.1 Kaizencoders URL Shortify 1.3.2 Kaizencoders URL Shortify 1.3.3 Kaizencoders URL Shortify 1.3.4 Kaizencoders URL Shortify 1.3.5 Kaizencoders URL Shortify 1.3.6 Kaizencoders URL Shortify 1.3.7 Kaizencoders URL Shortify 1.3.8 Kaizencoders URL Shortify 1.3.9 Kaizencoders URL Shortify 1.3.10 Kaizencoders URL Shortify 1.3.10.1 Kaizencoders URL Shortify 1.4.0 Kaizencoders URL Shortify 1.4.1 Kaizencoders URL Shortify 1.4.2 Kaizencoders URL Shortify 1.4.3 Kaizencoders URL Shortify 1.4.4 Kaizencoders URL Shortify 1.4.5 Kaizencoders URL Shortify 1.4.5.1 Kaizencoders URL Shortify 1.4.6 Kaizencoders URL Shortify 1.4.7 Kaizencoders URL Shortify 1.4.8 Kaizencoders URL Shortify 1.4.9 Kaizencoders URL Shortify 1.4.10 Kaizencoders URL Shortify 1.4.11 Kaizencoders URL Shortify 1.4.12 Kaizencoders URL Shortify 1.5.0 Kaizencoders URL Shortify 1.5.1 Kaizencoders URL Shortify 1.5.2 Kaizencoders URL Shortify 1.5.3 Kaizencoders URL Shortify 1.5.4 Kaizencoders URL Shortify 1.5.5 Kaizencoders URL Shortify 1.5.6 Kaizencoders URL Shortify 1.5.7 Kaizencoders URL Shortify 1.5.8 Kaizencoders URL Shortify 1.5.9 Kaizencoders URL Shortify 1.5.10 Kaizencoders URL Shortify 1.5.11 Kaizencoders URL Shortify 1.5.12 Kaizencoders URL Shortify 1.5.12.1 Kaizencoders URL Shortify 1.5.12.2 Kaizencoders URL Shortify 1.5.13 Kaizencoders URL Shortify 1.5.14 Kaizencoders URL Shortify 1.5.15 Kaizencoders URL Shortify 1.5.15.1 Kaizencoders URL Shortify 1.5.15.2 Kaizencoders URL Shortify 1.5.15.3 Kaizencoders URL Shortify 1.5.16 Kaizencoders URL Shortify 1.5.16.1 Kaizencoders URL Shortify 1.6.0 Kaizencoders URL Shortify 1.6.1 Kaizencoders URL Shortify 1.6.1.1 Kaizencoders URL Shortify 1.6.2 Kaizencoders URL Shortify 1.6.3 Kaizencoders URL Shortify 1.6.4 Kaizencoders URL Shortify 1.6.5 Kaizencoders URL Shortify 1.7.0 Kaizencoders URL Shortify 1.7.1 Kaizencoders URL Shortify 1.7.2 Kaizencoders URL Shortify 1.7.3 Kaizencoders URL Shortify 1.7.4 Kaizencoders URL Shortify 1.7.5	95

References

https://wpscan.com/vulnerability/1fc71fc7-861a-46cc-a147-1c7ece9a7776