{"id":35318,"date":"2024-11-01T12:36:01","date_gmt":"2024-11-01T07:06:01","guid":{"rendered":"https:\/\/www.getastra.com\/blog\/?p=35318"},"modified":"2024-12-17T14:09:00","modified_gmt":"2024-12-17T08:39:00","slug":"stored-xss-vulnerability-in-bodi0","status":"publish","type":"post","link":"https:\/\/www.getastra.com\/blog\/vulnerability\/stored-xss-vulnerability-in-bodi0\/","title":{"rendered":"Stored XSS Vulnerability in bodi0\u2019s Easy Cache Plugin"},"content":{"rendered":"
\n\n

Product Name:<\/strong> bodi0’s Easy Cache
Vulnerability:<\/strong> Stored XSS
Vulnerable Version: <\/strong>0.8
CVE:<\/strong> CVE-2024-12628<\/p>\n\n<\/div>\n\n\n


On September 16, 2024, the team of pentesters at Astra Security found a stored Cross-Site Scripting or XSS in bodi0\u2019s Easy Cache plugin. It is a plugin designed for WordPress that helps optimize the caching functionality, thus allowing enhanced page loading and reducing the server load.<\/p>\n\n\n\n

A stored XSS vulnerability<\/a> occurs when an application allows malicious user input, stored without proper sanitization and accessible to other application users.<\/p>\n\n\n\n

<\/span>How Does a Stored XSS Vulnerability Occur?<\/span><\/h2>\n\n\n\n

Stage 1: Injection<\/strong><\/h3>\n\n\n\n

The first stage starts with the attacker injecting malicious payloads or scripts into the application using various methods, such as Injecting code into various input fields. This can also be achieved by uploading files injected with malicious payloads.<\/p>\n\n\n\n

Stage 2: Storage:<\/strong><\/h3>\n\n\n\n

The malicious code is stored within the application\u2019s data storage, such as databases, file systems, cookies, or session data.<\/p>\n\n\n\n

Stage 3: Retrieval and Execution:<\/strong><\/h3>\n\n\n\n

Every time a user visits the page where the payload or infected file is stored or loaded, the code is executed within the user\u2019s browser.<\/p>\n\n\n\n

This can lead to vulnerabilities and threats like:<\/p>\n\n\n\n