Lucene search

Felipe Restrepo Rodriguez, Daniel Alvear, Germán Novoa, Gabriel Vásquez, Anderson ReisWPVDB-ID:753DF046-9FD7-4D15-9114-45CDE6D6539B

HistoryDec 11, 2023 - 12:00 a.m.

WP TripAdvisor Review Slider < 11.9 - Admin+ Stored XSS

2023-12-1100:00:00

Felipe Restrepo Rodriguez, Daniel Alvear, Germán Novoa, Gabriel Vásquez, Anderson Reis

wpscan.com

wordpress

tripadvisor

xss

stored xss

unsanitised settings

admin privilege

multisite setup

poc

4.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.2%

JSON

Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)

PoC

1. Go to Get TripAdvisor Reviews option and search for: "autofocus onfocus=alert(1)// 2. Reenter the Get TripAdvisor Reviews option and an XSS will be shown. It will also display on the frontend.