YARPP - Yet Another Related Posts Plugin < 5.30.3 - Contributor+ Stored XSS

2023-01-1900:00:00

Lana Codes

164

yarpp

plugin

stored xss

vulnerability

0.001 Low

EPSS

Percentile

21.6%

JSON

The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

v < 5.30.3
[yarpp template="' onmouseover='alert(/XSS/)"]

v < 5.30.2
[yarpp extra_css_class="' onmouseover='alert(/XSS/)"]

0.001 Low

EPSS

Percentile

21.6%

JSON

Related for WPEX-ID:C6CF792B-054C-4D77-BCAE-3B700F42130B