Vik Rent Car < 1.1.10 - Authenticated Stored Cross-Site Scripting (XSS)

2021-07-1900:00:00

Muhammad Daffa

314

0.001 Low

EPSS

Percentile

24.8%

JSON

The plugin does not sanitise the ‘Text Next to Icon’ field when adding or editing a Characteristic, allowing high privilege users such as admin to use XSS payload in it, leading to an authenticated Stored Cross-Site Scripting issue

Add or Edit a Characteristic (/wp-admin/admin.php?option=com_vikrentcar&task=carat)) with the following payload in the 'Text Next to Icon' field: <script>alert(/XSS/)</script>

Then view the Characteristics List to trigger the XSS

0.001 Low

EPSS

Percentile

24.8%

JSON

Related for WPEX-ID:368828F9-FDD1-4A82-8658-20E0F4C4DA0C