WordPress Plugin Vulnerabilities

Locatoraid Store Locator < 3.9.15 - Contributor+ Stored Cross-Site Scripting

Description

The plugin does not properly sanitize input and escape output in its shortcode(s), leading to stored cross-site scripting vulnerabilities for authenticated users with contributor-level permissions or higher.

Affects Plugins

Plugin icon
locatoraid
Fixed in 3.9.15

References

CVE
CVE-2023-2031
URL
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/locatoraid/locatoraid-store-locator-3914-authenticated-contributor-stored-cross-site-scripting-via-shortcode

Miscellaneous

Original Researcher
Alex Thomas
Verified
No
WPVDB ID
1e90baf5-1f11-4abe-9595-8065548f7b00

Timeline

Publicly Published
2023-04-17 (about 2 years ago)
Added
2023-06-09 (about 2 years ago)
Last Updated
2023-06-09 (about 2 years ago)

Other

Published
Title
Published
2014-08-01
Title
Lazyest Gallery 0.10.4.3 - Multiple File/Directory Insecure Permissions Local Content Manipulation
Published
2014-08-01
Title
SL User Create 0.2.4 - LSL script Secret String Weakness Information Disclosure
Published
2014-08-01
Title
Persuasion <= 2.4 - dl-skin.php _mysite_delete_skin_zip Parameter Absolute Path Traversal Remote Directory Deletion
Published
2018-08-16
Title
Export Users to CSV <= 1.1.1 - CSV Injection
Published
2022-03-11
Title
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package