Easy Preloader <= 1.0.0 – Authenticated Stored Cross-Site Scripting (XSS) | CVE 2021-24344 | Plugin Vulnerabilities

Description

The plugin does not sanitise its setting fields, leading to authenticated (admin+) Stored Cross-Site scripting issues

Proof of Concept

Step 1: Install the plugin "Easy Preloader"

Step 2: Enter the payload below in the text field "Choose overlay color" (or any other text fields) in the plugin's settings (wp-admin/options-general.php?page=ep-options)

"><script>alert(/XSS/)</script>

Step 3: The script will be stored and executed all the times when going to the plugin settings.

Affects Plugins

No known fix

References

CVE

Classification

Type

XSS

OWASP top 10

A7: Cross-Site Scripting (XSS)

CWE

CVSS

Miscellaneous

Original Researcher

Kishore Hariram

Submitter

Kishore Hariram

Submitter twitter

Verified

Yes

WPVDB ID

6d6c1d46-5c3d-4d56-9728-2f94064132aa

Timeline

Publicly Published

2021-05-24 (about 4 years ago)

Added

2021-05-24 (about 4 years ago)

Last Updated

2021-08-10 (about 4 years ago)

Other

Published

Title

Published

2015-08-20

Title

Huge IT Image Gallery < 1.5.6 - Authenticated Cross-Site Scripting (XSS)

Published

2024-03-18

Title

Passwordless Login < 1.1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting

Published

2023-05-10

Title

Booking Ultra Pro < 1.1.9 - Reflected XSS

Published

2024-06-03

Title

Slider Revolution < 6.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Elementor wrapperid and zindex

Published

2017-02-19

Title

Time Sheets < 1.5.2 - Multiple XSS