WordPress Plugin Vulnerabilities
Accordion & FAQ < 1.9.9 - Reflected XSS
Description
The plugin does not escape various generated URLs, before outputting them in attributes when some notices are displayed, leading to Reflected Cross-Site Scripting
Proof of Concept
Make a logged-in admin open one of the URLs below when the feature notice has not been dismissed yet https://example.com/wp-admin/edit-tags.php?taxonomy=helpie_faq_group&post_type=helpie_faq&"><script>alert(/XSS/)</script>
Affects Plugins
Fixed in 1.9.9 References
CVE
Classification
Type
XSS
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Erwan LR (WPScan)
Verified
Yes
WPVDB ID
Timeline
Publicly Published
2023-06-05 (about 11 months ago)
Added
2023-06-05 (about 11 months ago)
Last Updated
2023-06-05 (about 11 months ago)
WPScan 