WordPress Plugin Vulnerabilities

Advanced WordPress Reset < 1.6 - Reflected Cross-Site Scripting

Description

The plugin does not escape some generated URLs before outputting them back in href attributes of admin dashboard pages, leading to Reflected Cross-Site Scripting

Proof of Concept

- Completely reset the site using the plugin
- Visit https://example.com/wp-admin/tools.php?page=advanced_wp_reset&"><script>alert(1)</script>

Affects Plugins

advanced-wp-reset

Fixed in version 1.6

References

CVE

CVE-2022-2181

Classification

Type

XSS

OWASP top 10

A7: Cross-Site Scripting (XSS)

CWE

CWE-79

Miscellaneous

Original Researcher

ZhongFu Su(JrXnm) of WuHan University

Submitter

ZhongFu Su(JrXnm) of WuHan University

Submitter website

https://blog.szfszf.top

Submitter twitter

JrXnm

Verified

Yes

WPVDB ID

68ddf343-6e69-44a7-bd33-72004053d41e

Timeline

Publicly Published

2022-07-05 (about 1 months ago)

Added

2022-07-05 (about 1 months ago)

Last Updated

2022-07-05 (about 1 months ago)

Our Other Services

WPScan WordPress Security Plugin