Sign-up Sheets < 1.0.14 – Authenticated Stored Cross-Site Scripting (XSS) | CVE 2021-24440 | Plugin Vulnerabilities

Description

The plugin did not sanitise or escape some of its fields when creating a new sheet, allowing high privilege users to add JavaScript in them, leading to a Stored Cross-Site Scripting issue. The payloads will be triggered when viewing the 'All Sheets' page in the admin dashboard

Proof of Concept

As admin, add a new Sheet and add the following payload in the "Title", "Details" and "Task" fields: <script>alert("Test")</script>

The XSS will be trigger whenever an admin goes to the All Sheets page.

Affects Plugins

Fixed in 1.0.14

References

CVE

Classification

Type

XSS

OWASP top 10

A7: Cross-Site Scripting (XSS)

CWE

CVSS

Miscellaneous

Original Researcher

Ajay Sandipan Thorbole

Submitter

Ajay Sandipan Thorbole

Submitter twitter

Verified

Yes

WPVDB ID

ba4503f7-684e-4274-bc53-3aa848712496

Timeline

Publicly Published

2021-06-21 (about 4 years ago)

Added

2021-06-21 (about 4 years ago)

Last Updated

2021-06-25 (about 4 years ago)

Other

Published

Title

Published

2022-01-18

Title

Five Star Business Profile and Schema < 2.1.7 - Subscriber+ Page Creation & Settings Update to Stored XSS

Published

2023-04-23

Title

AI Contact Us Form <= 1.0 - Admin+ Stored XSS

Published

2024-06-07

Title

DL Yandex Metrika <= 1.2 - Admin+ Stored XSS

Published

2025-09-09

Title

Additional Custom Product Tabs for WooCommerce < 1.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published

2016-09-21

Title

W3 Total Cache < 0.9.5 - Authenticated Reflected Cross-Site Scripting (XSS)