WordPress Plugin Vulnerabilities
WP User Profile Avatar <= 1.0.1 - Contributor+ Stored XSS
Description
The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
Proof of Concept
Enter the following shortcode in a post, and hover the resulting HTML. [user_profile_avatar size='" onmouseover="alert(/XSS/)"']
Affects Plugins
References
Classification
Type
XSS
OWASP top 10
CWE
Miscellaneous
Original Researcher
Dmitrii Ignatyev
Submitter
Dmitrii Ignatyev
Submitter website
Verified
Yes
WPVDB ID
Timeline
Publicly Published
2024-03-25 (about 1 months ago)
Added
2024-03-25 (about 1 months ago)
Last Updated
2024-04-02 (about 1 months ago)