Everest Forms <3.0.4.2 Stored XSS Vulnerability (CVE-2024-10471)

From this webpage screenshot, the following key vulnerability information can be extracted: 1. Plugin Name: Everest Forms < 3.0.4.2 2. Vulnerability Type: Admin+ Stored XSS 3. Description: The plugin does not sanitize or escape certain settings, allowing users with high privileges (such as administrators) to perform a stored cross-site scripting attack when unfiltered HTML capability is disabled. 4. Proof of Concept: - Step 1: Create/edit a form. - Step 2: Add/edit an email block and change the “Custom Required Message” field in the main settings. - Step 3: Save the form. - When the form is submitted and the email field is empty, the XSS payload is triggered. 5. Affected Plugin: everest-forms 6. Fix Status: Fixed in version 3.0.4.2. 7. References: - CVE: CVE-2024-10471 - URL: https://research.cleantalk.org/cve-2024-10471 8. Classification: - Type: XSS - OWASP Top 10: A7: Cross-Site Scripting (XSS) - CWE: CWE-79 - CVSS: 3.5 (Low) 9. Additional Information: - Original Researcher: Dmitrii Ignatyev - Submitter: Dmitrii Ignatyev - Submitter Website: https://www.linkedin.com/in/dmitriy-ignatyev-8a9189267/ - Verified: Yes - WPVDB ID: 85d590c9-c96d-40c9-aa59-48302ba3d63c - Published: 2024-11-05 - Added: 2024-11-05 - Last Updated: 2024-11-05 10. Other Vulnerabilities: - WishSuite < 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting - P3 (Plugin Performance Profiler) <= 1.5.3.8 - Cross-Site Scripting (XSS) - Custom Tables 3.4.4 - iframe.php key Parameter XSS - Button Generator - easily Button Builder < 2.3.4 - Admin+ Stored XSS - Eduma < 5.4.8 - Reflected Cross-Site Scripting This information provides a detailed description and resolution for the stored cross-site scripting (XSS) vulnerability in the Everest Forms < 3.0.4.2 plugin.

Goal Reached Thanks to every supporter — we hit 100%!

Everest Forms <3.0.4.2 Stored XSS Vulnerability (CVE-2024-10471)

More from this source