Slickr Flickr <= 2.8.1 - Admin+ Stored Cross-Site Scripting

2022-08-2900:00:00

Kishore Hariram

251

slickr flickr

admin+

stored cross-site scripting

burpsuite

payload

xss

prompt

EPSS

0.001

Percentile

24.8%

JSON

The plugin does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

Open the plugin and intercept the request using burpsuite. 

Give the below payload in the parameter "flickr_id" and submit the request. 
xss"/><script>prompt(2)</script>//xss

The stored XSS will be triggered whenever the user visits the page.

EPSS

0.001

Percentile

24.8%

JSON

Related for WPEX-ID:3C5FF229-85C2-49C2-8FB9-6419A8002A4E