Coming Soon, Under Construction & Maintenance Mode By Dazzler < 1.6.7 - Admin+ Stored Cross-Site Scripting

2021-10-0400:00:00

Asif Nawaz Minhas

277

0.001 Low

EPSS

Percentile

24.8%

JSON

The plugin does not sanitise or escape its description setting when outputting it in the frontend when the Coming Soon mode is enabled, even when the unfiltered_html capability is disallowed, leading to an authenticated Stored Cross-Site Scripting issue

Via the plugin's settings:
- Enable the 'Coming Soon Mode'
- Put the following payload in the Description field <svg onload=alert(/XSS/)>

Then access the frontend as a user to trigger the XSS

0.001 Low

EPSS

Percentile

24.8%

JSON

Related for WPEX-ID:4BDA5DFF-F577-4CD8-A225-C6B4C32F22B4