WordPress Plugin Vulnerabilities
SupportCandy < 2.2.7 - Reflected Cross-Site Scripting
Description
The plugin does not sanitise and escape the query string before outputting it back in pages with the [wpsc_create_ticket] shortcode embed, leading to a Reflected Cross-Site Scripting issue
Proof of Concept
Note: the ticket-creation page is the one with the [wpsc_create_ticket] shortcode embed https://example.com/ticket-creation/?};alert(/XSS/)//=1
Affects Plugins
Fixed in version 2.2.7
References
Classification
Miscellaneous
Original Researcher
apple502j
Submitter
apple502j
Verified
Yes
Timeline
Publicly Published
2022-01-05 (about 1 years ago)
Added
2022-01-05 (about 1 years ago)
Last Updated
2022-04-08 (about 1 years ago)