Product Slider for WooCommerce < 2.6.4 - Contributor+ Stored XSS in Shortcode

2022-12-2800:00:00

Lana Codes

216

product slider

woocommerce

stored xss

shortcode

dependency plugin

exploit

security

EPSS

0.001

Percentile

25.5%

JSON

The plugin does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.

Install the Dependency plugin - WooCommerce: https://wordpress.org/plugins/woocommerce

Exploit shortcode:

[woo-product-slider id='" onmouseover="alert(1)" style="background:red;"']

EPSS

0.001

Percentile

25.5%

JSON

Related for WPEX-ID:CF0A51F9-21D3-4AE8-B7D2-361921038FE8