WordPress Plugin Vulnerabilities
Quick Chat <= 4.14 - Authenticated Stored Cross-Site Scripting
Description
An Authenticated Persistent XSS vulnerability is present in the the plugin options page (/wp-admin/options-general.php?page=quick-chat/quick-chat.php), vulnerable fields: «Chat name prefix for guest users», «Advertisement code for your AdSense».
Proof of Concept
The PoC will be displayed once the issue has been remediated
Affects Plugins
No known fix - plugin closed
References
Classification
Miscellaneous
Original Researcher
Ex.Mi
Submitter
Ex.Mi
Submitter website
Verified
Yes
Timeline
Publicly Published
2020-10-14 (about 2 years ago)
Added
2020-10-19 (about 2 years ago)
Last Updated
2020-10-20 (about 2 years ago)