CVE-2015-10121: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (CWE-79)
value: A vulnerability has been found in Beeliked Microsite Plugin up to 1.0.1 on WordPress and classified as problematic. Affected by this vulnerability is the function embed_handler of the file beelikedmicrosite.php. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 1.0.2 is able to address this issue. The identifier of the patch is d23bafb5d05fb2636a2b78331f9d3fca152903dc. It is recommended to upgrade the affected component. The identifier VDB-233365 was assigned to this vulnerability.
CWE description: The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
CVSS v3 base score: 6.1
Published: 2023-07-10T16:15Z
Repository: https://github.com/wp-plugins/beeliked-microsite
Language: PHP
Files changed: beelikedmicrosite.php
Commit date: 2015-03-27 13:07:32 +0000
Commit message: Set iframe resizer to allow cross-site scripting, allowing custom subdomains for competitions.

git-svn-id: https://plugins.svn.wordpress.org/beeliked-microsite/trunk@1122180 b8457f37-d9ea-0310-8a92-e5e31aec5664

Diff: diff --git a/beelikedmicrosite.php b/beelikedmicrosite.php
index 86f492e..9813962 100644
--- a/beelikedmicrosite.php
+++ b/beelikedmicrosite.php
@@ -1,11 +1,11 @@
 <?php
 /*
 Plugin Name: Beeliked Microsite
 Plugin URI: http://beeliked.com
 Description: Allows the insertion of code to display a BeeLiked microsite within an iframe. The tag to insert the code is: <code>[BEELIKED_MICROSITE]</code>, containing url, width, height and autosize parameters.
-Version: 1.0.1
+Version: 1.0.2
 Author: Beeliked
 Author URI: http://beeliked.com
 License: GPLv2 or later
 Text Domain: beeliked
 */
@@ -117,11 +117,11 @@ class BeelikedMicrosite extends BeelikedMicrosite_Plugin
 		$autosize = $atts['autosize'] ? 1 : 0;
 		
 		$this->iframeId++;
 		$return = "<iframe load-url=\"{$atts['url']}\" id=\"bee-microsite-iframe-{$this->iframeId}\" class=\"bee-microsite-iframe\" width=\"{$atts['width']}\" height=\"{$atts['height']}\" data-autosize=\"{$autosize}\" frameborder=\"0\"></iframe>
 <script type=\"text/javascript\" src=\"http://beta.beeliked.com/microsite/js/beeliked.clientIframe.js\"></script>
-<script type=\"text/javascript\">jQuery(document).ready(function() { jQuery('.bee-microsite-iframe[data-autosize=1]').iFrameResize({heightCalculationMethod : 'max'}); });</script>";
+<script type=\"text/javascript\">jQuery(document).ready(function() { jQuery('.bee-microsite-iframe[data-autosize=1]').iFrameResize({heightCalculationMethod : 'max', checkOrigin: false}); });</script>";
 		return $return;
 	}
 }
 
 $beelikedMicrosite = new BeelikedMicrosite;

Vulnerable code: Version: 1.0.1
<script type=\"text/javascript\">jQuery(document).ready(function() { jQuery('.bee-microsite-iframe[data-autosize=1]').iFrameResize({heightCalculationMethod : 'max'}); });</script>";
Fixed code: Version: 1.0.2
<script type=\"text/javascript\">jQuery(document).ready(function() { jQuery('.bee-microsite-iframe[data-autosize=1]').iFrameResize({heightCalculationMethod : 'max', checkOrigin: false}); });</script>";