Lucene search

WpvulndbWPVDB-ID:37C4E182-0210-4E7B-B111-C437120260DC

HistoryMar 28, 2024 - 12:00 a.m.

DearFlip < 2.2.27 - Contributor+ Stored XSS

2024-03-2800:00:00

wpscan.com

dearflip

plugin

vulnerability

stored xss

input sanitization

output escaping

authenticated attackers

contributor-level access

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Description The plugin is vulnerable to Stored Cross-Site Scripting via the 'force_fit ’ parameter due to insufficient input sanitization and output escaping, allowing authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

CPENameOperatorVersion
eq2.2.27

CPE	Name	Operator	Version
		eq	2.2.27

References

patchstack.com/database/vulnerability/3d-flipbook-dflip-lite/wordpress-dearflip-plugin-2-2-26-cross-site-scripting-xss-vulnerability