WordPress Plugin Vulnerabilities

Livemesh Addons for Elementor < 7.2.4 - Admin+ Stored XSS

Description

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

Proof of Concept

1. Enter the setting page of this plugin.
2. In the input boxes named "Theme Color" and "Theme Hover Color", enter the following value in the box. The value is: #fc0000" onmouseenter=alert(1) "
3. Click the 'Save Changes' button on the page.
4. Refresh or re-enter the page and move the mouse over the input box to get the XSS trigger.

Affects Plugins

Plugin icon
addons-for-elementor
Fixed in 7.2.4

References

CVE
CVE-2022-3862

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
3.4 (low)

Miscellaneous

Original Researcher
zhangyunpei
Submitter
zhangyunpei
Verified
Yes
WPVDB ID
3db9a8f5-3335-4b8d-a067-091cbfed1efc

Timeline

Publicly Published
2022-11-21 (about 1 years ago)
Added
2022-11-21 (about 1 years ago)
Last Updated
2022-11-21 (about 1 years ago)

Other

Published
Title
Published
2024-04-05
Title
Fancy Product Designer < 6.1.8 - Reflected Cross Site Scripting
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Published
2024-04-19
Title
Prime Slider – Addons For Elementor < 3.14.1 - Contributor+ Stored Cross-Site Scripting
Published
2021-09-09
Title
Integration of Moneybird for WooCommerce <= 2.1.1 - Reflected Cross-Site Scripting
Published
2024-04-01
Title
Metform Elementor Contact Form Builder < 3.8.6 - Contributor+ Stored XSS