Simple Share Buttons Adder < 8.5.1 - Admin+ Stored XSS

2024-05-2800:00:00

Dmitrii Ignatyev

share buttons adder

stored xss

admin

plugin

settings

additional css

payload

save settings

trigger

page reload

5.9 Medium

AI Score

Confidence

High

JSON

Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed

1. Go to the plugin settings
2. In the "Additional CSS" field, enter the payload `</style><img src=x onerror=alert(/XSS/)>`
3. Save settings and see the XSS when the page reloads

References

research.cleantalk.org/cve-2024-4094

5.9 Medium

AI Score

Confidence

High

JSON

Related for WPEX-ID:04B2FEBA-E009-4FCE-8539-5DFDB4300433