Stored XSS in Slider by 10Web WordPress Plugin < 1.2.59

From this webpage screenshot, the following key information about the vulnerability can be extracted: 1. Plugin Name: Slider by 10Web < 1.2.59 2. Vulnerability Type: Admin+ Stored XSS 3. Description: The plugin does not sanitize or escape certain settings, allowing high-privilege users (such as administrators) to perform stored cross-site scripting attacks when unfiltered HTML capability is disabled. 4. Proof of Concept: - Create a new slide - Add a random image - Change the "Link slide to" field to: - Create a new post and a new slide via shortcode - Access the post and click on the image - Close the popup window; the XSS will be visible in the original window 5. Affected Plugin: slider-wd 6. Fixed Version: 1.2.59 7. Reference Link: Includes a YouTube video link 8. Classification: - Type: XSS - OWASP Top 10: A7: Cross-Site Scripting (XSS) - CWE: CWE-79 - CVSS: 3.5 (low) 9. Additional Information: - Original Researcher: Dmitrii Ignatyev - Submitter: Dmitrii Ignatyev - Submitter Website: https://www.linkedin.com/in/dmitriy-ignatyev-8a9189267/ - Verified: Yes - WPVDB ID: a60aed55-c0a2-4912-8844-cdddf31d90b6 - Timeline: - Public Release: 2024-09-09 (approximately 21 days ago) - Added: 2024-09-09 (approximately 21 days ago) - Last Updated: 2024-09-09 (approximately 21 days ago) 10. Other Vulnerabilities: - Co-marquage service-public.fr < 0.5.72 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode - Post Meta Data Manager < 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting - Shortcodes Ultimate < 7.0.5 - Contributor+ Stored XSS - Contact Form 7 Skins < 2.5.1 - Reflected Cross-Site Scripting (XSS) - Asgaros Forums < 1.15.14 - Admin+ Stored Cross-Site Scripting This information provides a detailed description of the plugin vulnerability and its resolution.

Goal Reached Thanks to every supporter — we hit 100%!

Stored XSS in Slider by 10Web WordPress Plugin < 1.2.59

More from this source