Donorbox 7.1~7.1.1 - Stored Cross-Site Scripting via Shortcode

2019-12-3100:00:00

Sybre Waaijer

wpscan.com

JSON

In Donorbox WordPress plugin, one can perform an XSS attack via the included shortcode by inserting arbitrary HTML attributes. This vulnerability was introduced in v7.1 and fixed in v7.1.2.

PoC

[donate url=‘/?" autofocus onfocus="alert(window)" abitraryAttributeToValidateShortcodeParsing="’]

CPENameOperatorVersion
donorbox-donation-formlt7.1.2

CPE	Name	Operator	Version
	donorbox-donation-form	lt	7.1.2

References

gist.github.com/sybrew/833bf49d81bc8246fba8dabf8a3ba12a

JSON