Simple Giveaways < 2.45.1 - Admin+ Stored Cross-Site Scripting

2023-03-2000:00:00

Varun

stored cross-site scripting

admin login

xss payload

security exploit

form settings

0.001 Low

EPSS

Percentile

23.3%

JSON

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)

Login with admin user and navigate to "Giveaways > Settings > Forms"
Enter XSS payload (<script>alert(/XSS/)</script>) in the Field Name and observe the popup. Click on save. 

The XSS will be triggered each time an admin go to such settings and add a character to the field name

0.001 Low

EPSS

Percentile

23.3%

JSON

Related for WPEX-ID:7EAD9FB9-D81F-47C6-A1B4-21F29183CC15