Virtual Robots.txt < 1.10 - Authenticated Stored Cross-Site Scripting (XSS)

2021-03-2900:00:00

wpvulndb

xss

authenticated

cross-site scripting

plugin settings

user agents

directives

disallow

exploit

EPSS

0.002

Percentile

60.7%

JSON

The plugin did not sanitise the content of the robots.txt, allowing high privilege users (admin+) to use XSS payloads, which will be output back in the settings page of the plugin.

Put the following directive in the plugin settings "User Agents and Directives for this site"

Disallow: /wp-register.php</textarea></td></tr><script>alert(1);</script>