Add Custom Body Class <= 1.4.1 - Contributor+ Stored Cross-Site Scripting

2023-10-2700:00:00

wpscan.com

plugin

escape

parameter

contributor

web scripts

higher privileged users

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.1%

JSON

Description The plugin does not properly escape the add_custom_body_class parameter before outputting it to the page, allowing users with the role of contributor of higher to inject arbitrary web scripts potentially targeting higher privileged users.

References

www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/add-custom-body-class/add-custom-body-class-141-authenticated-contributor-stored-cross-site-scripting