Video Slider - Slider Carousel < 1.4.8 - Admin+ Stored Cross-Site Scripting

2022-05-1600:00:00

Fayçal CHENA

video slider

slider carousel

admin+

stored cross-site scripting

payload injection

xss exploit

security vulnerability

EPSS

0.001

Percentile

24.8%

JSON

The plugin does not sanitize or escape some of its video settings, which could allow high-privileged users to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed

Create/edit a video from a slider and put the following payload in the Description: <img src=x onerror=alert(/XSS/)>, then save/update the video (via the button below the Description textarea) and save/update the Slider (top right button)

The XSS will be triggered in post/page where the Slider is embed

EPSS

0.001

Percentile

24.8%

JSON

Related for WPEX-ID:053A9815-CF0A-472E-844A-3DEA407CE022