Slickr Flickr <= 2.8.1 - Admin+ Stored Cross-Site Scripting

2022-08-2900:00:00

Kishore Hariram

237

slickr flickr

admin+

stored cross-site scripting

burpsuite

payload

xss

prompt

0.001 Low

EPSS

Percentile

25.0%

JSON

The plugin does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

Open the plugin and intercept the request using burpsuite. 

Give the below payload in the parameter "flickr_id" and submit the request. 
xss"/><script>prompt(2)</script>//xss

The stored XSS will be triggered whenever the user visits the page.

0.001 Low

EPSS

Percentile

25.0%

JSON

Related for WPEX-ID:3C5FF229-85C2-49C2-8FB9-6419A8002A4E