WordPress Plugin Vulnerabilities

Pressforward < 5.2.4 - Reflected Cross-Site Scripting (XSS)

Description

The plugin did not sanitise the $_SERVER['QUERY_STRING'] before outputting it back in the page, leading to a reflected Cross-Site Scripting issue.

The issue was initially reported in v4.3.0 but was never fixed, and was still affecting the plugin until 5.2.4

Proof of Concept

Affects Plugins

Plugin icon
pressforward
Fixed in 5.2.4

References

CVE
CVE-2017-12948
URL
http://www.defensecode.com/advisories/DC-2017-05-007_WordPress_PressForward_Plugin_Advisory.pdf

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
7.1 (high)

Miscellaneous

Original Researcher
DefenseCode
Verified
Yes
WPVDB ID
c9560ff0-8150-486c-a263-defb3954d211

Timeline

Publicly Published
2017-08-07 (about 8 years ago)
Added
2021-05-14 (about 4 years ago)
Last Updated
2021-06-08 (about 4 years ago)

Other

Published
Title
Published
2024-07-16
Title
Ultimate Addons for WPBakery Page Builder < 3.19.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Published
2023-05-19
Title
Groundhogg < 2.7.10 - Contributor+ Stored XSS
Published
2025-12-20
Title
Image Photo Gallery Final Tiles Grid < 3.6.9 - Authenticated (Author+) Stored Cross-Site Scripting via 'Custom Scripts' Setting
Published
2025-01-16
Title
REDIRECTION PLUS <= 2.0.0 - Reflected Cross-Site Scripting
Published
2019-05-20
Title
FV Flowplayer Video Player < 7.3.14.727 - Unauthenticated Stored XSS