Lucene search

K
wpvulndbAsif Nawaz MinhasWPVDB-ID:B15744DE-BF56-4E84-9427-B5652D123C15
HistoryOct 05, 2021 - 12:00 a.m.

Booking.com Product Helper < 1.0.2 - Admin+ Stored Cross-Site Scripting

2021-10-0500:00:00
Asif Nawaz Minhas
wpscan.com
8

0.001 Low

EPSS

Percentile

24.8%

The plugin does not sanitize and escape Product Code when creating Product Shortcode, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed

PoC

When creating a “New product shortcode” you can inject XSS payloads like <--![]() --!> in the Product Code form field. When a page that includes that product’s shortcode is viewed by a visitor, the payload will execute.

CPENameOperatorVersion
bookingcom-product-helperlt1.0.2

0.001 Low

EPSS

Percentile

24.8%

Related for WPVDB-ID:B15744DE-BF56-4E84-9427-B5652D123C15