WordPress File Upload < 4.23.3 - Author+ Stored Cross-Site Scripting

2023-09-2500:00:00

FAIYAZ AHMAD

wordpress

file upload

cross-site scripting

0.0004 Low

EPSS

Percentile

14.1%

JSON

Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as authors to perform Stored Cross-Site Scripting attacks.

1. Add the following shortcode to a post:

[wordpress_file_upload redirect="true" redirectlink="javascript:alert(1)"]

2. Upload any file on the resulting post.
3. After the upload completes, you will see the XSS alert in the browser.

0.0004 Low

EPSS

Percentile

14.1%

JSON

Related for WPEX-ID:7F9271F2-4DE4-4BE3-8746-2A3F149EB1D1