WordPress Plugin Vulnerabilities

Advanced Database Cleaner < 3.1.1 - Reflected Cross-Site Scripting

Description

The plugin does not escape numerous generated URLs before outputting them back in href attributes of admin dashboard pages, leading to Reflected Cross-Site Scripting

Proof of Concept

https://example.com/wp-admin/admin.php?page=advanced_db_cleaner&aDBc_tab=cron&aDBc_cat=all&"><script>alert(/XSS/)</script>

Other pages are affected

Affects Plugins

advanced-database-cleaner

Fixed in version 3.0.4

References

CVE

CVE-2022-2173

Classification

Type

XSS

OWASP top 10

A7: Cross-Site Scripting (XSS)

CWE

CWE-79

Miscellaneous

Original Researcher

ZhongFu Su(JrXnm) of WuHan University

Submitter

ZhongFu Su(JrXnm) of WuHan University

Submitter website

https://blog.szfszf.top

Submitter twitter

JrXnm

Verified

Yes

WPVDB ID

86bfe0cc-a579-43d6-a26b-6e06000251f6

Timeline

Publicly Published

2022-06-27 (about 9 months ago)

Added

2022-06-27 (about 9 months ago)

Last Updated

2022-09-26 (about 6 months ago)

Our Other Services

WPScan WordPress Security Plugin