WordPress Plugin Vulnerabilities

Fancy Product Designer < 4.5.1 - Unauthenticated Stored Cross-Site Scripting

Description

Fancy Product Designer for WooCommerce before version 4.5.1 permits the upload of unsanitized SVG files by unauthenticated users. SVG files can contain JavaScript which will be executed by the browser if the malicious SVG is accessed directly. This JavaScript will run in the context of the affected domain and logged in user.

Affects Plugins

Plugin icon
fancy-product-designer
Fixed in 4.5.1

References

URL
https://packetstormsecurity.com/files/#160120/
URL
https://github.com/jdgregson/Disclosures/blob/master/fancy-product-designer/stored-xss-via-svg-upload/

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Original Researcher
Jonathan Gregson
Verified
No
WPVDB ID
f4e2cd49-5c12-4b38-92c0-de07401c42c9

Timeline

Publicly Published
2020-11-18 (about 5 years ago)
Added
2020-11-18 (about 5 years ago)
Last Updated
2020-11-20 (about 5 years ago)

Other

Published
Title
Published
2024-06-12
Title
WPBakery Page Builder < 7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via VC Single Image link attribute
Published
2024-06-11
Title
Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via cfs[post_content]
Published
2024-04-01
Title
Template Kit – Import < 1.0.15 - Author+ Stored XSS
Published
2025-04-03
Title
Latest Custom Post Type Updates <= 1.3.0 - Reflected Cross-Site Scripting
Published
2024-05-03
Title
Swift Framework <= 2.7.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes