WordPress Plugin SupportEzzy Ticket System 1.2.5 - Persistent Cross-Site Scripting

🗓️ 12 Nov 2014 00:00:00Reported by Halil DalabasmazType

WordPress Plugin SupportEzzy Ticket System 1.2.5 - Persistent Cross-Site Scripting vulnerability. Stored XSS allows running payloads via "URL (optional)" input

Reporter	Title	Published	Views	Family All 8
CVE	CVE-2014-9179	2 Dec 201416:00	–	cve
Cvelist	CVE-2014-9179	2 Dec 201416:00	–	cvelist
EUVD	EUVD-2014-9004	7 Oct 202500:30	–	euvd
NVD	CVE-2014-9179	2 Dec 201416:59	–	nvd
Patchstack	WordPress SupportEzzy Ticket System Plugin 1.2.5 - Stored XSS	12 Nov 201400:00	–	patchstack
Prion	Cross site scripting	2 Dec 201416:59	–	prion
RedhatCVE	CVE-2014-9179	22 May 202501:50	–	redhatcve
WPVulnDB	SupportEzzy Ticket System 1.2.5 - Cross Site Scripting	13 Nov 201419:41	–	wpvulndb

# Exploit Title: SupportEzzy Ticket System - WordPress Plugin Stored XSS
Vulnerability
# Date: 12-10-2014
# Exploit Author: Halil Dalabasmaz
# Version: v1.2.5
# Vendor Homepage:
http://codecanyon.net/item/supportezzy-ticket-system-wordpress-plugin/8908617
# Software Test Link: http://demo.cssjockey.com/cjsupport/supportezzy/
# Tested on: Iceweasel and Chrome

# Vulnerabilities Description:

===Stored XSS===
Register and login to system and then submit new ticket. "URL (optional)"
input is not secure. You can run XSS payloads, use sample payload to test.

Sample Payload for Stored XSS: http://example.com
"><script>alert(document.cookie);</script>

===Solution===
Filter the input fields aganist to XSS attacks.
===============

12 Nov 2014 00:00Current

5.2Medium risk

Vulners AI Score5.2

CVSS 24

EPSS0.03588