WordPress Plugin Vulnerabilities

Store Locator WordPress < 1.4.13 - Reflected XSS

Description

The plugin does not sanitise and escape an invalid nonce before outputting it back in an AJAX response, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Proof of Concept

Affects Plugins

Plugin icon
agile-store-locator
Fixed in 1.4.13

References

CVE
CVE-2023-4151

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
7.1 (high)

Miscellaneous

Original Researcher
tnt24
Submitter
tnt24
Verified
Yes
WPVDB ID
c9d80aa4-a26d-4b3f-b7bf-9d2fb0560d7b

Timeline

Publicly Published
2023-08-10 (about 2 years ago)
Added
2023-08-10 (about 2 years ago)
Last Updated
2023-08-10 (about 2 years ago)

Other

Published
Title
Published
2018-10-26
Title
Flow-Flow Social Stream <= 3.0.71 - Unauthenticated Cross-Site Scripting (XSS)
Published
2024-04-11
Title
WidgetKit <= 2.5.1 - Contributor+ Stored XSS
Published
2024-05-14
Title
Picture Gallery < 1.5.12 - Authenticated (Author+) Stored Cross-Site Scripting
Published
2024-10-09
Title
Download Manager < 3.3.00 - Contributor+ Stored XSS
Published
2020-08-31
Title
WP Floating Menu < 1.4.1 - Authenticated Reflected Cross-Site Scripting