WP Not Login Hide <= 1.0 - Admin+ Stored XSS

2023-11-1400:00:00

Furkan ÖZER

wordpress

admin+ stored xss

wpnlh settings

plugin vulnerability

warning message

saved changes

5.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.2%

JSON

Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)

1. Visit the "WPNLH" interface available in settings page of the plugin that is named "WPNLH Settings"
3. In the plugin's "Warning Message" setting field, enter the payload
Payload: `" text"autofocus/onfocus=alert(1)// "`
6. Click the "Save Changes" button.
7. The XSS will be triggered on the settings page when every visit of an authenticated user.