Lucene search

Bob MatyasWPVDB-ID:287C4E8C-9092-4CB9-9642-E4F3D10F46FA

HistoryJun 07, 2024 - 12:00 a.m.

Animated AL List <= 1.0.6 - Reflected XSS

2024-06-0700:00:00

Bob Matyas

wpscan.com

animated al list

version 1.0.6

reflected xss

cross-site scripting

high privilege users

admin

security vulnerability

web application

5.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Description The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

PoC

1. Add a new project 2. Access the URL https://example.com/wp-admin/admin.php?page=animated_al_show&active;=0&pid;="> 3. See the XSS