Simple Video Directory < 1.4.4 – Contributor+ Stored XSS | CVE 2024-5811 | Plugin Vulnerabilities

Description

The plugin does not sanitise and escape some of its settings, which could allow contributors and higher to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)

Proof of Concept

1. As a contributor, add go to https://example.com/wp-admin/post-new.php?post_type=smd
2. Add the payload `"><script>alert(23)</script>` to either the "Media Title" or the "Media Subtitle" and save
3. As an admin, add the shortcode for the media you just added and see the XSS

Affects Plugins

simple-media-directory

Fixed in 1.4.4

References

CVE

Classification

Type

XSS

OWASP top 10

A7: Cross-Site Scripting (XSS)

CWE

CVSS

Miscellaneous

Original Researcher

Bob Matyas

Submitter

Bob Matyas

Submitter website

https://www.bobmatyas.com

Submitter twitter

Verified

Yes

WPVDB ID

bf6c2e28-51ef-443b-b1c2-d555c7e12f7f

Timeline

Publicly Published

2024-06-21 (about 1 year ago)

Added

2024-06-21 (about 1 year ago)

Last Updated

2024-06-21 (about 1 year ago)

Other

Published

Title

Published

2024-11-11

Title

Contact Form 7 Redirect & Thank You Page < 1.0.7 - Reflected Cross-Site Scripting

Published

2024-04-16

Title

Tagembed: Embed Twitter Feed, Google Reviews, YouTube Videos, TikTok, RSS Feed & More Social Media Feeds < 4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published

2014-08-01

Title

ClickDesk <= 4.3 - Live Chat Widget Multiple Field XSS

Published

2018-01-12

Title

Read and Understood <= 2.1 - Authenticated Stored XSS & CSRF

Published

2025-10-02

Title

Ultimate Multi Design Video Carousel <= 1.4 - Authenticated (Editor+) Stored Cross-Site Scripting