WordPress Plugin Vulnerabilities
Loading Page with Loading Screen < 1.0.83 - Admin+ Stored Cross-Site Scripting
Description
The plugin does not escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
Proof of Concept
Go to Settings -> Loading Page, in the "Display loading screen in" settings, select either "specific pages" or "specific post types" and ut the following payload in the related text field: "onmouseover=alert(/XSS/)//
Affects Plugins
Fixed in version 1.0.83
References
Classification
Miscellaneous
Original Researcher
Nikhil Kapoor
Submitter
Nikhil Kapoor
Submitter website
Verified
Yes
Timeline
Publicly Published
2022-06-23 (about 9 months ago)
Added
2022-06-23 (about 9 months ago)
Last Updated
2022-06-23 (about 9 months ago)