Lucene search

K
wpexploitLana CodesWPEX-ID:AC7158C5-3D11-4865-B26F-41AB5A8120AF
HistoryNov 22, 2022 - 12:00 a.m.

Easy Video Player < 1.2.2.3 - Contributor+ Stored XSS

2022-11-2200:00:00
Lana Codes
126

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

The plugin does not sanitize and escapes some parameters, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks.

1. Add a new post and add the payload there: [evp_embed_video url='" onerror=alert(/XSS/) "']
2. Preview the post, and the XSS will trigger.

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Related for WPEX-ID:AC7158C5-3D11-4865-B26F-41AB5A8120AF