Executive Summary

The DeMomentSomTres Shortcodes plugin for WordPress has a Stored Cross-Site Scripting (XSS) vulnerability in its 'callout' shortcode up to version 1.1.1. This vulnerability arises because the plugin does not properly sanitize or escape input for the 'width' and 'align' attributes in the st_callout() function. These attribute values are directly inserted into an HTML style attribute, allowing an authenticated attacker with contributor-level access or higher to inject malicious scripts. These scripts execute whenever any user views the affected page.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can allow an attacker with contributor-level access to inject arbitrary malicious scripts into pages on a WordPress site using the vulnerable plugin. When other users visit these pages, the injected scripts execute in their browsers, potentially leading to theft of user credentials, session hijacking, defacement, or other malicious actions. This compromises the security and integrity of the website and its users.

Useful 0 Not Useful 0

Mitigation Strategies

The vulnerability exists in all versions of the DeMomentSomTres Shortcodes plugin up to and including version 1.1.1. To mitigate this vulnerability, you should update the plugin to a version later than 1.1.1 where the issue is fixed.

Additionally, restrict contributor-level access and above to trusted users only, as the vulnerability requires authenticated users with contributor-level permissions or higher to exploit.

Useful 0 Not Useful 0