BugTraq
Persistent Cross-Site Scripting in WooCommerce using image metadata (EXIF) Jul 20 2016 04:17PM
Summer of Pwnage (lists securify nl)
------------------------------------------------------------------------

Persistent Cross-Site Scripting in WooCommerce using image metadata
(EXIF)
------------------------------------------------------------------------

Han Sahin, July 2016

------------------------------------------------------------------------

Abstract
------------------------------------------------------------------------

A persistent Cross-Site Scripting (XSS) vulnerability has been found in
the WooCommerce WordPress Plugin (millions of active installations). An
attacker can create a specially crafted image file which, when uploaded
as a product image in WordPress, injects malicious JavaScript code into
the application. An attacker can use this vulnerability to perform a
wide variety of actions, such as stealing victims' session tokens or
login credentials, and performing arbitrary actions on their behalf.

------------------------------------------------------------------------

OVE ID
------------------------------------------------------------------------

OVE-20160720-0006

------------------------------------------------------------------------

Tested versions
------------------------------------------------------------------------

This issue was successfully tested on WooCommerce version 2.6.2.

------------------------------------------------------------------------

Fix
------------------------------------------------------------------------

This issue is resolved in WooCommerce 2.6.3.

------------------------------------------------------------------------

Details
------------------------------------------------------------------------

https://sumofpwn.nl/advisory/2016/persistent_cross_site_scripting_in_woo
commerce_using_image_metadata__exif_.html

------------------------------------------------------------------------

Summer of Pwnage (https://sumofpwn.nl) is a Dutch community project. Its
goal is to contribute to the security of popular, widely used OSS
projects in a fun and educational way.

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus