Restaurant Menu by MotoPress < 2.4.2 - Admin+ Stored Cross Site Scripting

2021-09-2800:00:00

Shivam Rai

301

motopress

cross site scripting

admin+

stored cross site scripting

menu items

wordpress

EPSS

0.001

Percentile

24.8%

JSON

The plugin does not properly sanitize or escape inputs when creating new menu items, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed

* Click on "Add New" under Restaurant Menu Plugin.
* Give any random title like Testing_XSS
* All fields under Nutrition Facts and Portion Size are susceptible to XSS
 "><script>alert(1)</script>
* XSS will trigger on visits to Menu Items in wp-admin as well as on the Menu Item's public pages.

EPSS

0.001

Percentile

24.8%

JSON

Related for WPEX-ID:14B29450-2450-4B5F-8630-BB2CBFBD0A83