WooCommerce Brands < 1.6.46 - Contributor+ Stored XSS

2023-05-1500:00:00

wpvulndb

woocommerce

brands

xss

stored

contributor+

image

product

edit

exploit

0.0004 Low

EPSS

Percentile

14.2%

JSON

The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

Add a Brand with an image, and assign it to a Product on the Product Edit page.

[product_brand post_id="PRODUCT_ID" height='" onload=alert(/XSS/)//"']

References

patchstack.com/database/vulnerability/woocommerce-brands/wordpress-woocommerce-brands-plugin-1-6-45-contributor-stored-cross-site-scripting-xss-vulnerability

0.0004 Low

EPSS

Percentile

14.2%

JSON

Related for WPEX-ID:28F6D610-B877-496C-93B5-924F2A724D53