Google Apps Login < 3.4.5 - Admin+ Stored XSS

2022-12-0100:00:00

zhangyunpei

111

google apps login

stored xss

admin+

wordpress

0.001 Low

EPSS

Percentile

23.5%

JSON

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

1. Go to the setting page of this plugin.

2. In "Advanced Options" » "Login With Google Button Styles" enter the payload: <img src='x' onerror=alert(1)>

3. Then click the "Save Changes" button at the bottom.

4. Log out of the WordPress account and then re-enter the user login interface to get the XSS trigger.

0.001 Low

EPSS

Percentile

23.5%

JSON

Related for WPEX-ID:71414436-EF54-4CE6-94E2-62E68D1A371D