BugTraq
Stored Cross-Site Scripting in WP Canvas - Shortcodes WordPress Plugin Nov 19 2016 10:48AM
Summer of Pwnage (lists securify nl)
------------------------------------------------------------------------

Stored Cross-Site Scripting in WP Canvas - Shortcodes WordPress Plugin
------------------------------------------------------------------------

Yorick Koster, July 2016

------------------------------------------------------------------------

Abstract
------------------------------------------------------------------------

A Cross-Site Scripting vulnerability was found in the WP Canvas -
Shortcodes WordPress Plugin. This issue allows an attacker to perform a
wide variety of actions, such as stealing Administrators' session
tokens, or performing arbitrary actions on their behalf. This issue can
be exploited by authenticated users with the Contributor or higher role.

------------------------------------------------------------------------

OVE ID
------------------------------------------------------------------------

OVE-20160724-0031

------------------------------------------------------------------------

Tested versions
------------------------------------------------------------------------

This issue was successfully tested on WP Canvas - Shortcodes WordPress
Plugin version 1.92.

------------------------------------------------------------------------

Fix
------------------------------------------------------------------------

This issue has been addressed in WP Canvas - Shortcodes WordPress Plugin
version 2.07.

------------------------------------------------------------------------

Details
------------------------------------------------------------------------

https://sumofpwn.nl/advisory/2016/stored_cross_site_scripting_in_wp_canv
as___shortcodes_wordpress_plugin.html

------------------------------------------------------------------------

Summer of Pwnage (https://sumofpwn.nl) is a Dutch community project. Its
goal is to contribute to the security of popular, widely used OSS
projects in a fun and educational way.

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus