WordPress Plugin Vulnerabilities

WP MediaTagger <= 4.1.1 - Contributor+ Stored XSS

Description

The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

Proof of Concept

Affects Plugins

Plugin icon
wp-mediatagger
No known fix

References

CVE
CVE-2024-13101

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
5.9 (medium)

Miscellaneous

Original Researcher
Bob Matyas
Submitter
Bob Matyas
Submitter website
https://www.bobmatyas.com
Submitter twitter
bobmatyas
Verified
Yes
WPVDB ID
03f51b54-0ec2-40ce-a0fa-ef0c4ab0ea99

Timeline

Publicly Published
2025-01-10 (about 11 months ago)
Added
2025-01-10 (about 11 months ago)
Last Updated
2025-01-10 (about 11 months ago)

Other

Published
Title
Published
2025-03-27
Title
MapPress Maps for WordPress < 2.94.10 - Admin+ Stored XSS
Published
2016-01-26
Title
WP Easy Gallery <= 4.1.4 - Reflected Cross-Site Scripting (XSS)
Published
2024-09-25
Title
Move Addons for Elementor < 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2024-06-07
Title
Simple AL Slider <= 1.2.10 - Reflected XSS
Published
2025-04-01
Title
Footnotes for WordPress <= 2016.1230 - Authenticated (Contributor+) Stored Cross-Site Scripting