Stored XSS in WordPress Plugin NinjaTeam Header Footer Custom Code <= 1.2

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Plugin Name: NinjaTeam Header Footer Custom Code <= 1.2 2. Vulnerability Type: Admin+ Stored XSS via CSS Styles 3. Description: The plugin does not sanitize or escape certain settings, allowing users with high privileges (such as administrators) to perform stored cross-site scripting attacks even when unfiltered HTML capabilities are disabled. 4. Proof of Concept: - Navigate to the plugin settings. - Input the payload in the CSS field. - Save and view the site to observe the XSS. 5. Affected Plugin: header-footer-code 6. Fix Status: Fixed in version 1.2. 7. References: - CVE: None - OWASP Top 10: A7: Cross-Site Scripting (XSS) - CWE: CWE-79 8. Additional Information: - Original Researcher: Bob Matyas - Submitter: Bob Matyas - Submitter Website: https://www.bobmatyas.com - Submitter Twitter: bobmatyas - Verified: Yes - WPVDB ID: 9c5efe3c-95a8-4647-86c0-20aa7dd92b66 - Publication Date: 2024-08-22 - Added Date: 2024-08-15 - Last Updated: 2024-08-15 - Related Vulnerabilities: WordPress 2.0 - 3.0.1 Cross-Site Scripting (XSS) in wp-admin/plugins.php, PageLayer < 1.7.8 - Author+ Stored XSS, Home Villas <= 2.2 - Multiple Cross-Site Scripting Issues, ExactMetrics < 7.12.1 - Contributor+ Stored XSS, Stock Locations for WooCommerce < 2.6.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings This information provides a detailed description of the vulnerability, steps to exploit it, affected plugins, and the fix status.

Goal Reached Thanks to every supporter — we hit 100%!

Stored XSS in WordPress Plugin NinjaTeam Header Footer Custom Code <= 1.2

More from this source