WordPress Plugin Vulnerabilities

Corner Ad < 1.0.8 - Admin+ Stored XSS

Description

The plugin does not escape its Ad Name before outputting it back in an attribute, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)

Proof of Concept

Affects Plugins

Plugin icon
corner-ad
Fixed in 1.0.8

References

CVE
CVE-2017-18579
Exploitdb
41376

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
3.4 (low)

Miscellaneous

Original Researcher
Atik Rahman
Verified
No
WPVDB ID
0122530a-98df-4299-9714-913543db5167

Timeline

Publicly Published
2017-02-16 (about 9 years ago)
Added
2019-08-23 (about 6 years ago)
Last Updated
2022-12-15 (about 3 years ago)

Other

Published
Title
Published
2024-04-05
Title
Salon booking system < 9.6.6 - Editor+ Stored XSS via Email Settings
Published
2022-04-07
Title
Visual Form Builder < 3.0.7 - Admin+ Stored Cross-Site Scripting
Published
2024-11-08
Title
Testimonial Slider Shortcode <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2024-10-21
Title
BP Member Type Manager <= 1.01 - Reflected Cross-Site Scripting
Published
2025-12-11
Title
Simple post listing <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode