WordPress Plugin Vulnerabilities

Slickr Flickr <= 2.8.1 - Admin+ Stored Cross-Site Scripting

Description

The plugin does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

Proof of Concept

Open the plugin and intercept the request using burpsuite. 

Give the below payload in the parameter "flickr_id" and submit the request. 
xss"/><script>prompt(2)</script>//xss

The stored XSS will be triggered whenever the user visits the page.

Affects Plugins

Plugin icon
slickr-flickr
No known fix

References

CVE
CVE-2022-3021

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
3.4 (low)

Miscellaneous

Original Researcher
Kishore Hariram
Submitter
Kishore Hariram
Verified
Yes
WPVDB ID
3c5ff229-85c2-49c2-8fb9-6419a8002a4e

Timeline

Publicly Published
2022-08-29 (about 1 years ago)
Added
2022-08-29 (about 1 years ago)
Last Updated
2022-08-29 (about 1 years ago)

Other

Published
Title
Published
2020-02-25
Title
Envira Photo Gallery < 1.7.7 - Authenticated Stored Cross-Site Scripting (XSS) Issue
Published
2022-06-02
Title
Download manager < 3.2.43 - Reflected Cross-Site Scripting
Published
2022-06-13
Title
Elementor < 3.5.6 - DOM Reflected Cross-Site Scripting
Published
2024-04-24
Title
TeraWallet – Best WooCommerce Wallet System With Cashback Rewards, Partial Payment, Wallet Refunds < 1.5.1 - Authenticated (Shop Manager+) Stored Cross-Site Scripting
Published
2022-09-19
Title
Social Rocket < 1.3.3 - Admin+ Stored Cross-Site Scripting