URL Shortener by MyThemeShop <= 1.0.17 – Admin+ Stored XSS | CVE 2024-5802 | Plugin Vulnerabilities

Description

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed

Proof of Concept

1. Navigate to http://127.0.0.1/wordpress/wp-admin/admin.php?page=url_shortener_add
2. After filling all required Input, goto Advanced and enter following payload into "Anchor Text" functionality input parameter: <script>alert('XSS')</script>.
3. Now, goto shortlinks page, XSS has been triggered.

Affects Plugins

mts-url-shortener

No known fix

References

CVE

Classification

Type

XSS

OWASP top 10

A7: Cross-Site Scripting (XSS)

CWE

CVSS

Miscellaneous

Original Researcher

Sandeep Vishwakarma

Submitter

Sandeep Vishwakarma

Submitter website

https://www.linkedin.com/in/sandeepvishwakarma1/

Verified

Yes

WPVDB ID

cd37f702-9144-4c98-9b08-c63e510cd97f

Timeline

Publicly Published

2024-06-18 (about 1 year ago)

Added

2024-06-18 (about 1 year ago)

Last Updated

2024-06-18 (about 1 year ago)

Other

Published

Title

Published

2024-08-29

Title

Like Button Rating < 2.6.54 - Cross-Site Request Forgery

Published

2025-04-02

Title

Modula Image Gallery < 2.10.2 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox 5 JavaScript Library

Published

2024-01-08

Title

Formidable Forms < 6.7.1 - HTML Injection

Published

2014-08-01

Title

Simple Slider 1.0 - New Image URL Field XSS

Published

2025-04-01

Title

Marketer Addons <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting