Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbJustin GreerWPVDB-ID:5A1143FF-65B0-404F-BE63-86B3E5D775DF
HistoryJan 28, 2016 - 12:00 a.m.

Sola Support Ticket <= 3.12 - XSS & Configuration Change

2016-01-2800:00:00
Justin Greer
wpscan.com
4

0.001 Low

EPSS

Percentile

21.6%

JSON

Any logged in user with any role and access to wp-admin in any way can update plugin settings including allowing HTML to be parsed. One can also change any notification messages to include JS which then can be used to obtain information by forgery.

PoC

Make POST request to /wp-admin with parameters sola_st_save_settings:1 sola_st_settings_allow_html:1 sola_st_settings_thank_you_text:

CPENameOperatorVersion
sola-support-ticketslt3.13

Related

cve 1
wpexploit 1
cvelist 1
prion 1
nvd 1
cve
cve
CVE-2016-11012
2019-09-20 15:15:13
wpexploit
wpexploit
Sola Support Ticket <= 3.12 - XSS & Configuration Change
2016-01-28 00:00:00
cvelist
cvelist
CVE-2016-11012
2019-09-20 14:48:38
prion
prion
Cross site scripting
2019-09-20 15:15:00
nvd
nvd
CVE-2016-11012
2019-09-20 15:15:13

0.001 Low

EPSS

Percentile

21.6%

JSON
Related for WPVDB-ID:5A1143FF-65B0-404F-BE63-86B3E5D775DF
cve1wpexploit1cvelist1prion1nvd1