Cerber Limit Login Attempts <= 2.0.1.6 - Unauthenticated Stored XSS

2016-04-0100:00:00

Gerard Arall

wpscan.com

0.001 Low

EPSS

Percentile

40.8%

JSON

If the option “I’m behind a proxy” is enabled, the visitor IP is read from X-Forwarded-For header, stored & printed in the admin panel without any sanitization / validation.

PoC

Set the X-Forwarded-For header to , and perform an incorrect login.

CPENameOperatorVersion
wp-cerberlt2.7

CPE	Name	Operator	Version
	wp-cerber	lt	2.7

References

wordpress.org/plugins/wp-cerber/changelog/

0.001 Low

EPSS

Percentile

40.8%

JSON

Related for WPVDB-ID:19C1F9C0-E30E-4A9C-8A0C-FBE3384D734A