Executive Summary

The BetterDocs - Knowledge Base Docs & FAQ Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) via the blockId attribute of the betterdocs/category-slate-layout Gutenberg block in versions up to and including 4.5.3.

This vulnerability exists because the plugin does not properly sanitize or escape input in the CategorySlateLayout::render() method, which directly outputs the blockId attribute into an HTML class attribute without using esc_attr().

As a result, authenticated users with contributor-level access or higher can inject arbitrary web scripts into pages, which will execute whenever any user accesses the injected page.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows attackers with contributor-level access or above to inject malicious scripts into pages.

These scripts can execute in the browsers of users who visit the affected pages, potentially leading to theft of user data, session hijacking, or other malicious activities.

Because the vulnerability is a Stored Cross-Site Scripting issue, the injected scripts persist on the site and affect all users who view the compromised content.

Useful 0 Not Useful 0