Social comments by WpDevArt < 2.5.0 – Admin+ Stored Cross-Site Scripting | CVE 2022-0876 | Plugin Vulnerabilities

Description

The plugin does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when unfiltered_html is disallowed

Proof of Concept

Put the following payload in any of the plugin's text field settings (such as Title , Title font-size etc): "><svg onload=prompt(1)//

Then save and reload the settings to trigger the XSS. The XSS will also trigger in pages/posts where the plugin's shortcode is embed

Affects Plugins

comments-from-facebook

Fixed in 2.5.0

References

CVE

Classification

Type

XSS

OWASP top 10

A7: Cross-Site Scripting (XSS)

CWE

CVSS

Miscellaneous

Original Researcher

Mika

Submitter

Mika

Submitter website

https://mikadmin.fr/

Submitter twitter

Verified

Yes

WPVDB ID

73be6e92-ea37-4416-977d-52ee2afa022a

Timeline

Publicly Published

2022-04-04 (about 3 years ago)

Added

2022-04-04 (about 3 years ago)

Last Updated

2022-04-09 (about 3 years ago)

Other

Published

Title

Published

2021-09-17

Title

WP Mega Menu < 1.4.1 - Reflected Cross-Site Scripting

Published

2025-01-24

Title

WP Contact Form7 Email Spam Blocker <= 1.0.0 - Reflected Cross-Site Scripting

Published

2024-04-11

Title

Responsive Gallery Grid < 2.3.15 - Admin+ Stored XSS

Published

2023-07-31

Title

Blog2Social < 7.2.1 - Reflected XSS

Published

2024-08-07

Title

Ultimate Addons for Beaver Builder – Lite < 1.5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting