WordPress Plugin Vulnerabilities

Transposh WordPress Translation < 1.0.8 - Stored Cross-Site Scripting

Description

The plugin does not sanitise and escape the tk0 parameter from the tp_translation AJAX action, leading to Stored Cross-Site Scripting, which will trigger in the admin dashboard of the plugin. The minimum role needed to perform such attack depends on the plugin "Who can translate ?" setting.

Proof of Concept

Affects Plugins

Plugin icon
transposh-translation-filter-for-wordpress
Fixed in 1.0.8

References

CVE
CVE-2021-24911

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Original Researcher
Julien Ahrens
Verified
Yes
WPVDB ID
bd88be21-0cfc-46bd-b78a-23efc4868a55

Timeline

Publicly Published
2022-02-22 (about 3 years ago)
Added
2022-07-28 (about 3 years ago)
Last Updated
2023-04-27 (about 2 years ago)

Other

Published
Title
Published
2022-12-13
Title
Image Hover Effects Ultimate 9.8.1-9.8.4 - Admin+ Stored XSS
Published
2021-08-06
Title
Highlight < 0.9.3 - Authenticated Stored Cross-Site Scripting
Published
2025-01-16
Title
PDF.js Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2025-01-07
Title
Power Mag <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2023-11-20
Title
Drop Shadow Boxes < 1.7.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode