PowerPress Podcasting < 6.0.5 – Authenticated Cross-Site Scripting (XSS) | CVE 2015-9410 | Plugin Vulnerabilities

Description

By exploiting a Cross-site scripting vulnerability the attacker can hijack a logged in user’s session by stealing cookies. This means that the malicious hacker can change the logged in user’s password and invalidate the session of the victim while the hacker maintains access.

Proof of Concept

1. Logon into any wordpress application (localhost or public host)
2. Modifying the value of tab variable in Blubrry PowerPress Version 6.0.4
3. Fill all the variables with "></script><script>alert(document.cookie);</script> payload and send the request to the server.
4. Now, the added XSS payload will be echoed back from the server without validating the input even after wp-config.php file has been configured with XSS filter settings.

Affects Plugins

Fixed in 6.0.5

References

CVE

URL

https://web.archive.org/web/20160220105334/https://permalink.gmane.org/gmane.comp.security.oss.general/18024

URL

https://github.com/cybersecurityworks/Disclosed/issues/7

Classification

Type

XSS

OWASP top 10

A7: Cross-Site Scripting (XSS)

CWE

CVSS

Miscellaneous

Submitter

ethicalhack3r

Submitter twitter

Verified

No

WPVDB ID

dc337770-bb13-4f88-99aa-c7fa2d58e0fc

Timeline

Publicly Published

2015-09-14 (about 10 years ago)

Added

2015-10-27 (about 10 years ago)

Last Updated

2020-10-23 (about 5 years ago)

Other

Published

Title

Published

2022-07-18

Title

Google Maps Anywhere <= 1.2.6.3 - Admin+ Stored Cross-Site Scripting

Published

2025-02-28

Title

Counter Box: Add Engaging Countdowns, Timers & Counters to Your WordPress Site < 2.0.7 - Authenticated (Administrator+) DOM-Based Stored Cross-Site Scripting

Published

2012-05-22

Title

Events Manager < 5.1.7 - Cross-Site Scripting (XSS)

Published

2021-06-28

Title

ProfilePress < 3.1.8 - Authenticated Stored XSS

Published

2025-10-27

Title

Mailster < 4.1.14 - Reflected Cross-Site Scripting