CVE-2025-23870
Published: 16 January 2025
Description
An adversary may rely upon a user clicking a malicious link in order to gain execution.
Security Summary
CVE-2025-23870 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin "Copyright Safeguard Footer Notice" by wygk, which enables Stored Cross-Site Scripting (XSS). The issue affects all versions of the plugin from unknown initial release through version 3.0 inclusive. It has a CVSS v3.1 base score of 7.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) and maps to CWE-352 (Cross-Site Request Forgery).
Unauthenticated attackers can exploit this vulnerability remotely with low attack complexity by tricking authenticated WordPress administrators or users with sufficient privileges into interacting with a malicious webpage, such as by clicking a forged link. This user interaction allows the attacker to submit a CSRF-protected form that injects and stores malicious JavaScript in the site's footer notice, leading to Stored XSS execution for subsequent visitors. Exploitation results in low-impact effects on confidentiality, integrity, and availability, with a changed scope due to cross-origin scripting.
The Patchstack advisory details this CSRF-to-Stored XSS issue in version 3.0 and earlier, recommending that site owners update the Copyright Safeguard Footer Notice plugin to a patched version beyond 3.0 to prevent exploitation.
Details
- CWE(s)
MITRE ATT&CK Enterprise Techniques
Why these techniques?
Vulnerability in public-facing WordPress plugin enables remote exploitation (T1190) via malicious link to trigger CSRF (T1204.001) resulting in stored JavaScript execution (T1059.007).