WordPress Plugin Vulnerabilities
Remove Footer Credit < 1.0.11 - Admin+ Stored Cross-Site Scripting
Description
The plugin does properly sanitise its settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed.
Proof of Concept
In the plugin's settings, put the following values: - In "Step 1: Enter text/HTML to remove (one per line)" field: powered - In "Step 2: Enter your own footer credit (one per line)": ">--><img src onerror=alert(/XSS/)> The XSS will be triggered in all pages
Affects Plugins
Fixed in version 1.0.11
References
Classification
Miscellaneous
Original Researcher
apple502j
Submitter
apple502j
Verified
Yes
Timeline
Publicly Published
2022-01-12 (about 8 months ago)
Added
2022-01-11 (about 8 months ago)
Last Updated
2022-04-12 (about 5 months ago)