Compliance Impact

I don't know

Useful 0 Not Useful 0

Detection Guidance

I don't know

Useful 0 Not Useful 0

Executive Summary

The Ad Short plugin for WordPress has a Stored Cross-Site Scripting (XSS) vulnerability in its 'ad' shortcode's 'client' attribute in all versions up to and including 2.0.1.

This vulnerability occurs because the plugin does not properly sanitize or escape the input provided in the 'client' attribute before inserting it into the HTML output.

Specifically, the ad_func() shortcode handler accepts the 'client' attribute and directly inserts it into a double-quoted HTML attribute (data-ad-client) without using any sanitization functions like esc_attr().

As a result, authenticated users with Contributor-level access or higher can inject malicious scripts that will be stored and executed whenever any user views the affected page.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows attackers with Contributor-level access or higher to inject arbitrary malicious scripts into pages.

When other users visit these pages, the injected scripts execute in their browsers, potentially leading to theft of sensitive information, session hijacking, or other malicious actions.

Because the attack is stored, the malicious code persists on the site and affects all users who access the compromised content.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, update the Ad Short plugin for WordPress to a version later than 2.0.1 where the issue is fixed.

Ensure that only trusted users have Contributor-level access or higher, as the vulnerability requires authenticated users with such privileges to exploit.

Consider temporarily disabling the Ad Short plugin if an immediate update is not possible.

Useful 0 Not Useful 0