NextScripts: Social Networks Auto-Poster < 4.3.24 - Unauthenticated Stored XSS

2022-01-0300:00:00

Krzysztof Zając

wpscan.com

0.001 Low

EPSS

Percentile

30.0%

JSON

The plugin does not sanitise and escape logged requests before outputting them in the related admin dashboard, leading to an Unauthenticated Stored Cross-Site Scripting issue

PoC

curl -H 'x-tomato: ’ ‘https://example.com/?nxs-cronrun=yes’ The XSS will be triggered in the Log/History dashboard (/wp-admin/admin.php?page=nxs-log)

CPENameOperatorVersion
social-networks-auto-poster-facebook-twitter-glt4.3.25

CPE	Name	Operator	Version
	social-networks-auto-poster-facebook-twitter-g	lt	4.3.25

References

plugins.trac.wordpress.org/changeset/2650138

0.001 Low

EPSS

Percentile

30.0%

JSON

Related for WPVDB-ID:B99DAE3D-8230-4427-ADC5-4EF9CBFB8BA1