WP Contact Slider < 2.4.7 - Editor+ Stored Cross-Site Scripting

2022-06-1300:00:00

Fayçal CHENA

0.001 Low

EPSS

Percentile

24.8%

JSON

The plugin does not sanitize and escape the Text to Display settings of sliders, which could allow high privileged users such as editor and above to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed

Create/edit a Slider, select the "text or HTML" for the " What would you like to display?" setting (at the bottom of the page), and put the following payload in the "Text to display" field while in Text mode: <img src onerror=alert(/XSS/)>

The XSS will be triggered in the post/page where the slider is embed/displayed

0.001 Low

EPSS

Percentile

24.8%

JSON

Related for WPEX-ID:69B75983-1010-453E-BF67-27B4A2A327A8