Jeeng Push Notifications < 2.0.4 – Admin+ Stored Cross-Site Scripting | CVE 2022-3610 | Plugin Vulnerabilities

Description

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)

Proof of Concept

Put the following payload in the "Account ID" setting of the plugin and save: "><img src=x onerror=alert(/XSS/)>

The XSS will be triggered when accessing the settings again

Affects Plugins

jeeng-push-notifications

Fixed in 2.0.4

References

CVE

Classification

Type

XSS

OWASP top 10

A7: Cross-Site Scripting (XSS)

CWE

CVSS

Miscellaneous

Original Researcher

Mariam Tariq

Submitter

Mariam Tariq - HunterSherlock

Verified

Yes

WPVDB ID

33b52dd7-613f-46e4-b8ee-beddd31689eb

Timeline

Publicly Published

2022-11-02 (about 3 years ago)

Added

2022-11-02 (about 3 years ago)

Last Updated

2022-11-02 (about 3 years ago)

Other

Published

Title

Published

2023-03-13

Title

Solidres <= 0.9.4 - Admin+ Stored XSS

Published

2024-11-08

Title

Text Advertisements <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published

2022-06-02

Title

Ultimate WooCommerce CSV Importer <= 2.0 - Reflected Cross-Site Scripting

Published

2023-03-27

Title

Easy Forms for MailChimp < 6.8.7 - Contributor+ Stored XSS

Published

2024-05-07

Title

Sticky Social Link <= 2.0.1 - Admin+ Stored XSS