WordPress CM Pop-Up Banners < 1.7.3 Contributor+ Stored XSS Vulnerability

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Plugin Name: CM Pop-Up Banners for WordPress < 1.7.3 2. Vulnerability Type: Contributor+ Stored XSS 3. Description: The plugin does not properly sanitize and escape certain pop-up fields, potentially allowing high-privilege users (such as contributors) to execute cross-site scripting attacks. 4. Proof of Concept: - Create a new campaign designed to trigger a pop-up on specific posts. - Insert the following payload into the content input field: - Enable the “Show on every page” option in the campaign settings. - Save changes and view any front-end page, or preview the campaign to trigger the XSS. 5. Affected Plugin: cm-pop-up-banners 6. Fix Status: Fixed in version 1.7.3. 7. References: - CVE - OWASP Top 10: A7: Cross-Site Scripting (XSS) - CWE: CWE-79 8. Additional Information: - Original Researcher: Eunho Kim - Submitter: Eunho Kim - Submitter Website: https://aiton.tistory.com - Verified: Yes - WPVDB ID: 3ee3023a-541c-40e6-8d62-24b4b110633c - Publication Date: 2024-08-22 - Added Date: 2024-08-22 - Last Updated Date: 2024-08-22 - Related Vulnerabilities: - Gutenberg Blocks with AI by Kadence WP < 3.2.37 - Contributor+ Stored Cross-Site Scripting via Block Link - Simple Bitcoin Faucets <= 1.7.0 - Unauthorised AJAX Call to Stored XSS - Multiple plugins by vcita - Contributor+ Stored Cross-Site Scripting - youForms for WordPress <= 1.0.5 - Authenticated Stored Cross-Site Scripting - Anti-Malware & Brute-Force Security by ELI <= 4.15.22 - Stored XSS This information provides a detailed description of the vulnerability, its scope, and remediation, helping to understand the severity and potential exploitation methods.

Goal Reached Thanks to every supporter — we hit 100%!

WordPress CM Pop-Up Banners < 1.7.3 Contributor+ Stored XSS Vulnerability

More from this source