All in One SEO < 4.6.1.1 - Contributor+ Stored XSS

2024-04-2900:00:00

Dmtirii Ignatyev

all in one seo

contributor+

stored xss

vulnerability

exploit

update

poc

may 13 2024

5.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Description The plugin does not validate and escape some of its Post fields before outputting them back, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

As a contributor, create a post and put the following payload in the "Meta Description" field: <img src=x onerror=alert(/XSS/)>

Save the post (as a draft or submit for review), the XSS will be triggered when any user (like an admin) edit the post again