WordPress Plugin Vulnerabilities

KingComposer < 2.9.5 - Unauthenticated Reflected Cross-Site Scripting

Description

A reflected Cross-Site Scripting (XSS) Vulnerability in the KingComposer plugin through 2.9.4 for WordPress allows remote attackers to trick a victim into submitting an install_online_preset AJAX request containing base64-encoded JavaScript (in the kc-online-preset-data POST parameter) that is executed in the victim's browser.

Affects Plugins

Plugin icon
kingcomposer
Fixed in 2.9.5

References

CVE
CVE-2020-15299
URL
https://www.wordfence.com/blog/2020/07/xss-flaw-impacting-100000-sites-patched-in-kingcomposer/

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Original Researcher
Ramuel Gall (Wordfence)
Submitter
Ramuel Gall
Submitter twitter
@ramuelgall
Verified
No
WPVDB ID
b239d9e7-261f-4639-aaf7-e6a2295b9328

Timeline

Publicly Published
2020-07-09 (about 5 years ago)
Added
2020-07-09 (about 5 years ago)
Last Updated
2020-07-10 (about 5 years ago)

Other

Published
Title
Published
2024-10-31
Title
Media Modal <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2024-01-05
Title
EventON < 4.4.1 - Reflected Cross-Site Scripting
Published
2023-12-26
Title
WP Remote Site Search < 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2024-10-15
Title
CURCY < 2.2.4 - Reflected Cross-Site Scripting
Published
2024-08-30
Title
WPZOOM Portfolio Lite – Filterable Portfolio Plugin < 1.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute