Lucene search

Sachin Bahl from eSec Forte Technologies Pvt LtdWPEX-ID:7D8B7871-BAA5-4A54-A9E9-2C9D302CDD12

HistoryJun 27, 2022 - 12:00 a.m.

Page Generator Plugin < 1.6.5 - Admin+ Stored Cross-Site Scripting

2022-06-2700:00:00

Sachin Bahl from eSec Forte Technologies Pvt Ltd

137

page generator plugin; admin+; cross-site scripting; keywords; add keyword; terms field; exploit.

EPSS

0.001

Percentile

24.8%

JSON

The plugin does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

Got to Page Generator -> Keywords -> Add Keyword and put the following payload in the "Terms" field then save the changes: </textarea><script>alert("XSS")</script>

EPSS

0.001

Percentile

24.8%

JSON

Related for WPEX-ID:7D8B7871-BAA5-4A54-A9E9-2C9D302CDD12