CVE-2024-10709: Stored XSS in YaDisk Files <= 1.2.5 via Shortcode

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Plugin Name: YaDisk Files <= 1.2.5 2. Vulnerability Type: Contributor+ Stored XSS via Shortcode 3. Description: The plugin does not validate or escape certain shortcode attributes when outputting pages/posts containing shortcodes, allowing users with Contributor or higher roles to execute stored cross-site scripting (XSS) attacks. 4. Proof of Concept: Provides an example code snippet demonstrating how to insert a shortcode into a page/post to trigger the XSS attack. 5. Affected Plugin: wp-yadisk-files 6. CVE ID: CVE-2024-10709 7. Classification: - Type: XSS - OWASP Top 10: A7: Cross-Site Scripting (XSS) - CWE: CWE-79 - CVSS Score: 6.8 (Medium) 8. Original Researcher: Bob Matyas 9. Submitter: Bob Matyas 10. Submitter Website: https://www.bobmatyas.com 11. Submitter Twitter: bobmatyas 12. Verification Status: Verified 13. WPVDB ID: 114aeaf7-32a5-4510-a497-92cc0951b022 14. Publication Date: 2024-11-04 15. Added Date: 2024-11-04 16. Last Updated: 2024-11-04 17. Others: - Related Vulnerabilities List: - Gestion-Pymes <= 1.5.6 - Admin+ Stored XSS - Ultimate Addons for Visual Composer < 3.16.12 - Authenticated XSS, CSRF, RCE - Photo Gallery < 1.5.75 - Stored Cross-Site Scripting via Uploaded SVG - Database for Contact Form 7 < 3.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting - reSmush.it Image Optimizer < 0.4.6 - Admin+ Cross-Site Scripting This information helps understand the vulnerability’s details, scope of impact, and how it can be exploited.

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2024-10709: Stored XSS in YaDisk Files <= 1.2.5 via Shortcode

More from this source