CVE-2024-11225

Vulnerability

Overview

The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) in all versions up to and including 5.9.3. The flaw stems from the use of add_query_arg without proper escaping on URLs, allowing unauthenticated attackers to inject arbitrary web scripts [1].

Exploitation

An attacker can exploit this vulnerability by crafting a malicious link that, when clicked by a user, executes the injected script in the context of the user's browser. No authentication is required, and the attack only requires the victim to perform a simple action such as clicking a link.

Impact

Successful exploitation enables an attacker to execute arbitrary JavaScript in the victim's browser. This can lead to session hijacking, credential theft, defacement of the affected WordPress site, or redirection to malicious sites.

Mitigation

As of the publication date, the vendor has not released a patched version. Users are advised to monitor the plugin's page [1] for updates and apply any security patches as soon as they become available. Until then, avoid clicking untrusted links that involve the plugin's functionality.