MailChimp Subscribe Forms < 4.0.9.2 - Admin+ Stored XSS

2023-05-2200:00:00

wpscan.com

mailchimp

subscribe forms

stored xss

plugin settings

high-privilege users

administrator

arbitrary web scripts

unfiltered_html capability

multisite setup

security vulnerability

EPSS

0.001

Percentile

17.7%

JSON

The plugin does not sanitize and escape some fields in the plugin settings, which could allow high-privilege users such as an administrator to inject arbitrary web scripts even when the unfiltered_html capability is disallowed (for example in a multisite setup).

References

patchstack.com/database/vulnerability/mailchimp-subscribe-sm/wordpress-pluginops-optin-builder-plugin-4-0-9-1-cross-site-scripting-xss

www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/mailchimp-subscribe-sm/mailchimp-subscribe-forms-4091-authenticated-administrator-stored-cross-site-scripting

EPSS

0.001

Percentile

17.7%

JSON

Related for WPVDB-ID:BECDD1C3-D989-4F3A-BB78-E13D1D280CDD