VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 24, 2023· Updated Apr 2, 2025

CVE-2023-0448

CVE-2023-0448

Description

The WP Helper Lite WordPress plugin, in versions < 4.3, returns all GET parameters unsanitized in the response, resulting in a reflected cross-site scripting vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Patches

Vulnerability mechanics

Root cause

"Missing output sanitization of GET parameters in the surveySubmit action response allows reflected cross-site scripting."

Attack vector

An unauthenticated attacker crafts a URL containing a malicious payload in any GET parameter and sends it to the `admin-ajax.php` endpoint with the `action=surveySubmit` parameter [ref_id=1]. Because the plugin reflects all GET parameters unsanitized in the response, the payload executes in the victim's browser when they visit the crafted link [ref_id=1]. The vulnerability is a reflected cross-site scripting (XSS) issue [CWE-79].

Affected code

The vulnerable code is in the function `surveySubmit_func()` of the file `includes/class-mbwp-helper.php` [ref_id=1]. The plugin returns all GET parameters in the response to the `surveySubmit` action without any sanitization [ref_id=1].

What the fix does

The advisory states that the fix is included in version 4.3 of the WP Helper Lite plugin [ref_id=1]. No patch diff is provided in the bundle, but the remediation requires sanitizing or escaping all GET parameters before reflecting them in the response to the `surveySubmit` action [ref_id=1].

Preconditions

  • authNo authentication required
  • inputVictim must visit a crafted URL
  • configTarget must have WP Helper Lite plugin installed and active
  • networkNetwork access to the WordPress instance

Reproduction

Visit the following URL, replacing TARGET_HOST with the WordPress instance: `http://TARGET_HOST/wp-admin/admin-ajax.php?action=surveySubmit&aaa=xxx">

Generated on May 26, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

1

News mentions

0

No linked articles in our index yet.