WordPress Forms by Pie Forms < 1.4.9.4 - Admin+ Stored Cross-Site Scripting

2022-05-1200:00:00

Hitesh Kumar

wordpress

pie forms

stored xss

EPSS

0.001

Percentile

24.8%

JSON

The plugin does not sanitise and escape some of its form fields, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks when unfiltered_html is disallowed

Create/edit a form, go to the Form Settings -> General Settings and put the following payload in the "Form Name", "Form Description" and "Successful form submission message": <script>alert(/XSS/)</script>, and tick the "Enable Form Title / Name on Front End" as well as "Enable Form Description Front End" checkboxes

Save the form. The XSS will be triggered in pages/post where the form is embed, and after the form is sent

EPSS

0.001

Percentile

24.8%

JSON

Related for WPEX-ID:5A2756C1-9ABF-4FD6-8CE2-9F840514DFCC