Re: Stored Cross-Site Scripting in WP Canvas - Shortcodes WordPress Plugin

["Larry W. Cashdollar" <larry0 () me com>]

Hello All,

These are really great advisories, my only wish is that they were copied to the security lists in their entirety.  This 
way we aren't relying on a single point of failure (your website) when looking for the data in the future.

Thanks!
Larry

> On Nov 19, 2016, at 5:48 AM, Summer of Pwnage <lists () securify nl> wrote:
>
> ------------------------------------------------------------------------
> Stored Cross-Site Scripting in WP Canvas - Shortcodes WordPress Plugin
> ------------------------------------------------------------------------
> Yorick Koster, July 2016
>
> ------------------------------------------------------------------------
> Abstract
> ------------------------------------------------------------------------
> A Cross-Site Scripting vulnerability was found in the WP Canvas -
> Shortcodes WordPress Plugin. This issue allows an attacker to perform a
> wide variety of actions, such as stealing Administrators' session
> tokens, or performing arbitrary actions on their behalf. This issue can
> be exploited by authenticated users with the Contributor or higher role.
>
> ------------------------------------------------------------------------
> OVE ID
> ------------------------------------------------------------------------
> OVE-20160724-0031
>
> ------------------------------------------------------------------------
> Tested versions
> ------------------------------------------------------------------------
> This issue was successfully tested on WP Canvas - Shortcodes WordPress
> Plugin version 1.92.
>
> ------------------------------------------------------------------------
> Fix
> ------------------------------------------------------------------------
> This issue has been addressed in WP Canvas - Shortcodes WordPress Plugin
> version 2.07.
>
> ------------------------------------------------------------------------
> Details
> ------------------------------------------------------------------------
> https://sumofpwn.nl/advisory/2016/stored_cross_site_scripting_in_wp_canvas___shortcodes_wordpress_plugin.html
>
> ------------------------------------------------------------------------
> Summer of Pwnage (https://sumofpwn.nl) is a Dutch community project. Its
> goal is to contribute to the security of popular, widely used OSS
> projects in a fun and educational way.
>
> _______________________________________________
> Sent through the Full Disclosure mailing list
> https://nmap.org/mailman/listinfo/fulldisclosure
> Web Archives & RSS: http://seclists.org/fulldisclosure/


_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/