WordPress Plugin Vulnerabilities

Rock Convert < 2.6.0 - Reflected Cross-Site Scripting

Description

The plugin does not sanitise and escape an URL before outputting it back in an attribute when a specific widget is present on a page, leading to a Reflected Cross-Site Scripting

Proof of Concept

Affects Plugins

Plugin icon
rock-convert
Fixed in 2.6.0

References

CVE
CVE-2022-3440

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
4.7 (medium)

Miscellaneous

Original Researcher
José Ricardo
Submitter
José Ricardo
Submitter website
https://www.ricard0x.me
Verified
Yes
WPVDB ID
e39fcf30-1e69-4399-854c-4c5b6ccc22a2

Timeline

Publicly Published
2022-10-10 (about 3 years ago)
Added
2022-10-10 (about 3 years ago)
Last Updated
2022-10-10 (about 3 years ago)

Other

Published
Title
Published
2025-01-06
Title
Sina Extension for Elementor < 3.6.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Sina Image Differ
Published
2025-12-06
Title
Advanced FAQ Manager < 1.5.3 - Authenticated (Author+) Stored Cross-Site Scripting
Published
2024-05-03
Title
BuddyPress < 12.4.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Published
2025-07-07
Title
Lightbox & Modal Popup WordPress Plugin – FooBox < 2.7.35 - Authenticated (Author+) Stored Cross-Site Scripting
Published
2024-05-31
Title
Contact Form Manager < 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting