WordPress Plugin Vulnerabilities

AP Mega Menu < 3.0.8 - Reflected Cross-Site Scripting

Description

The plugin does not sanitize and escape the _wpnonce parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.

Proof of Concept

Affects Plugins

Plugin icon
ap-mega-menu
Fixed in 3.0.8

References

CVE
CVE-2022-0628
URL
https://plugins.trac.wordpress.org/changeset/2684307

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Original Researcher
Ran Crane
Submitter
Ran Crane
Verified
Yes
WPVDB ID
af9787ee-c496-4f02-a22c-c8f8a97ad902

Timeline

Publicly Published
2022-02-28 (about 3 years ago)
Added
2022-02-28 (about 3 years ago)
Last Updated
2022-04-16 (about 3 years ago)

Other

Published
Title
Published
2025-04-04
Title
Musician's Pack for Elementor <= 1.8.7 - Contributor+ Stored XSS
Published
2024-03-28
Title
Ninja Forms Contact Form < 3.8.1 - Author+ Stored XSS
Published
2023-07-16
Title
CartFlows Pro < 1.11.12 - Reflected Cross-Site Scripting
Published
2024-11-08
Title
Luzuk Slider <= 0.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2021-04-12
Title
WP Super Cache < 1.7.3 - Authenticated Stored Cross-Site Scripting (XSS)