Voting Record <= 2.0 - Subscriber+ Stored XSS

2024-01-1000:00:00

Daniel Ruf

wpscan.com

voting record plugin

missing sanitisation

stored xss

authenticated users

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.2%

JSON

Description The plugin is missing sanitisation as well as escaping, which could allow any authenticated users, such as subscriber to perform Stored XSS attacks

PoC

Have a subscriber open an HTML file containing the following: See the XSS when logged in as an admin and viewing recorded votes.

References

magos-securitas.com/txt/CVE-2023-7084.txt