WordPress Plugin Vulnerabilities
Cluevo < 1.8.1 - Admin+ Stored Cross Site Scripting
Description
The plugin does not sanitise and escape Course's module, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
Proof of Concept
On the Learning Management page (/wp-admin/admin.php?page=cluevo-lms), click Add Course, then put the following payload in the Insert Module field and click on the Save button: "><script>alert(/XSS/)</script>
Affects Plugins
Fixed in version 1.8.1
References
Classification
Miscellaneous
Original Researcher
Rutuja D Shirke
Submitter
Rutuja D Shirke
Submitter website
Verified
Yes
Timeline
Publicly Published
2022-01-10 (about 1 years ago)
Added
2022-01-10 (about 1 years ago)
Last Updated
2022-04-16 (about 1 years ago)