CVE-2024-3751: 
WordPress vulnerability analysis and mitigation

The Seriously Simple Podcasting WordPress plugin before version 3.3.0 contains a stored Cross-Site Scripting (XSS) vulnerability identified as CVE-2024-3751. The vulnerability was discovered on June 22, 2024, and affects the plugin's settings functionality. This security issue specifically impacts high-privilege users such as administrators, particularly in multisite setup environments where the unfiltered_html capability is disallowed (WPScan).

The vulnerability stems from inadequate sanitization and escaping of certain plugin settings. The issue manifests during the initial onboarding flow of the plugin, specifically in the onboarding screen. The CVSS 3.1 score assigned by CISA-ADP is 4.8 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N, indicating a network-accessible vulnerability requiring high privileges and user interaction (NVD).

When exploited, this vulnerability allows high-privilege users to perform Stored Cross-Site Scripting attacks. The impact is particularly significant in multisite WordPress installations where the unfiltered_html capability is disabled, potentially affecting the security of the entire WordPress installation (WPScan).

The vulnerability can be exploited through the plugin's onboarding screen at '/wp-admin/admin.php?page=ssp-onboarding-1'. An attacker needs to enter malicious payload in the 'What's the name of your show?' field during the initial setup process. The XSS payload becomes active when creating and viewing new episodes associated with the compromised podcast name (WPScan).

The vulnerability has been patched in version 3.3.0 of the Seriously Simple Podcasting plugin. Users are strongly advised to update to this version or later to mitigate the security risk (WPScan).