BannerMan <= 0.2.4 – Multiple Admin+ Stored Cross-Site Scripting | CVE 2022-1275 | Plugin Vulnerabilities

Description

The plugin does not sanitize or escape its settings, which could allow high-privileged users to perform Cross-Site Scripting attacks when the unfiltered_html is disallowed (such as in multisite)

Proof of Concept

As administrator, put the following payloads in the mentioned settings of the plugin (/wp-admin/options-general.php?page=bannerman) then save

- </textarea><svg/onload=prompt(/XSS/)> in any of the textarea fields, like "Style your banner with CSS:"
- "><script>alert(/XSS/)</script> in any of the text fields like "Background colour"

Affects Plugins

No known fix

References

CVE

Classification

Type

XSS

OWASP top 10

A7: Cross-Site Scripting (XSS)

CWE

CVSS

Miscellaneous

Original Researcher

Fayçal CHENA

Submitter

Fayçal CHENA

Submitter website

https://fafachena.com/

Submitter twitter

Verified

Yes

WPVDB ID

bc2e5be3-cd2b-4ee9-8d7a-cabce46b7092

Timeline

Publicly Published

2022-05-09 (about 3 years ago)

Added

2022-05-09 (about 3 years ago)

Last Updated

2022-05-10 (about 3 years ago)

Other

Published

Title

Published

2025-04-22

Title

Simple Download Counter < 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published

2025-04-01

Title

SimplyRETS Real Estate IDX <= 3.1.0 - Reflected Cross-Site Scripting

Published

2014-08-01

Title

ZooEffect 1.08 - HTTP Referer Reflected XSS

Published

2025-09-22

Title

Better Find and Replace < 1.7.7 - Admin+ Stored XSS

Published

2023-01-19

Title

Youtube Shortcode <= 1.8.5 - Contributor+ Stored XSS