Lucene search

Felipe Restrepo Rodriguez, Joaquin Pochat y Gabriel CalleWPEX-ID:E3771938-40B5-4E8B-BB5A-847131A2B4A7

HistoryJan 31, 2023 - 12:00 a.m.

Arigato Autoresponder and Newsletter < 2.1.7.2 - Admin+ Stored XSS

2023-01-3100:00:00

Felipe Restrepo Rodriguez, Joaquin Pochat y Gabriel Calle

152

arigato autoresponder

newsletter

stored xss

mailing list

admin+

0.001 Low

EPSS

Percentile

23.5%

JSON

The plugin does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

1. Go to the Mailing list option and register a new user with the value "autofocus onfocus=alert(1)// on the email and name fields
2. Click on edit subscriber, and the XSS will be reflected

0.001 Low

EPSS

Percentile

23.5%

JSON

Related for WPEX-ID:E3771938-40B5-4E8B-BB5A-847131A2B4A7