Chamber Dashboard Business Directory < 3.3.1 – Authenticated Stored Cross-Site Scripting | CVE 2020-24699 | Plugin Vulnerabilities

Description

The plugin does not sanitise user input when creating or editing a business in the dashboard, allowing high privilege users (Editor+) to set XSS payloads in various fields.

Proof of Concept

Login as an editor or admin, then add/edit a business and set the phone number as "><img src onerror=alert(`XSS`)>

The payload will then be executed in the business list dashboard.

Other affected fields: Country, State, Social media url, E-mail, City, Zip, Address, Location and Hours

Affects Plugins

chamber-dashboard-business-directory

Fixed in 3.3.1

References

CVE

URL

https://l0l.xyz/sec/2020/08/31/1-wordpress-crm-xss.html

Classification

Type

XSS

OWASP top 10

A7: Cross-Site Scripting (XSS)

CWE

CVSS

Miscellaneous

Original Researcher

mihkelraba

Verified

Yes

WPVDB ID

271e9469-e746-4b50-ba41-7084218e693d

Timeline

Publicly Published

2020-08-31 (about 5 years ago)

Added

2020-09-08 (about 5 years ago)

Last Updated

2020-09-22 (about 5 years ago)

Other

Published

Title

Published

2024-12-07

Title

Badgearoo <= 1.0.14 - Admin+ Stored XSS

Published

2026-01-25

Title

Omnipress <= 1.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published

2025-01-16

Title

WCS QR Code Generator <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published

2025-03-27

Title

jAlbum Bridge < 2.0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published

2023-01-23

Title

WP Helper Lite < 4.3 - Reflected Cross-Site Scripting