Post Status Notifier Lite < 1.10.1 – Reflected XSS | CVE 2022-4325 | Plugin Vulnerabilities

Description

The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which can be used against high privilege users such as admin.

Proof of Concept

Make a logged in high privilege user such as admin open the URL below

https://example.com/wp-admin/options-general.php?page=post-status-notifier-lite&controller=<script>alert(`xss`)</script>

Affects Plugins

post-status-notifier-lite

Fixed in 1.10.1

References

CVE

Classification

Type

XSS

OWASP top 10

A7: Cross-Site Scripting (XSS)

CWE

CVSS

Miscellaneous

Original Researcher

cydave

Submitter

cydave

Submitter website

https://cyllective.com/

Submitter twitter

Verified

Yes

WPVDB ID

5b983c48-6b05-47cf-85cb-28bbeec17395

Timeline

Publicly Published

2022-12-15 (about 3 years ago)

Added

2022-12-14 (about 3 years ago)

Last Updated

2022-12-14 (about 3 years ago)

Other

Published

Title

Published

2016-10-21

Title

Heat Trackr <= 1.0 - XSS

Published

2015-08-21

Title

WP Legal Pages < 1.1 - Authenticated Stored Cross-Site Scripting (XSS)

Published

2014-08-01

Title

Uploadify Integration 0.9.6 - Multiple Cross Site Scripting Vulnerabilities

Published

2024-05-22

Title

PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode <= 1.7 - Authenticated (Admin+) Stored Cross-Site Scripting

Published

2024-09-25

Title

Catch Base < 3.4.7 - Authenticated (Author+) Stored Cross-Site Scripting