Tittle:
\nWordPress Plugin SEO ALert <= 1.59 – Admin+ Stored XSS<\/p>\n
References:
\nCVE-2023-2225<\/p>\n
Author:
\nTaurus Omar<\/p>\n
Description:
\nThe plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).<\/p>\n
Affects Plugins:
\nSEO ALert – No known fix – plugin closed<\/p>\n
Proof of Concept:<\/p>\n
1. Go to Vanilla Beans \u00bb SEO Alert.<\/p>\n
2. In “Slack Alert for” \u00bb “Slack Channel” add payload: “><audio src=x onerror=confirm(“XSS”)><\/p>\n
3. Save to get the XSS trigger.<\/p>\n
Classification:
\nType XSS
\nOWASP top 10 A7: Cross-Site Scripting (XSS)
\nCWE-79<\/p>\n
wpScan:
\nhttps:\/\/wpscan.com\/vulnerability\/0af475ba-5c02-4f62-876d-6235a745bbd6<\/p>\n","protected":false},"excerpt":{"rendered":"
Tittle: WordPress Plugin SEO ALert <= 1.59 – Admin+ Stored XSS References: CVE-2023-2225 Author: Taurus Omar Description: The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-45598","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/45598","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=45598"}],"version-history":[{"count":1,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/45598\/revisions"}],"predecessor-version":[{"id":45716,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/45598\/revisions\/45716"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=45598"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=45598"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=45598"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}