Executive Summary

The Easy Image Collage plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) through the 'grid[properties][borderColor]' and 'grid[images][N][attachment_url]' parameters in all versions up to and including 1.13.6.

This vulnerability exists because the plugin does not properly sanitize input or escape output, allowing authenticated users with author-level access or higher to inject arbitrary web scripts.

These injected scripts are stored and executed whenever a user accesses the affected page.

The attack bypasses WordPress's usual unfiltered_html restrictions because the data is stored via update_post_meta() rather than wp_insert_post(), meaning capability controls alone cannot block this attack.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can allow an attacker with author-level access to inject malicious scripts that execute in the browsers of users who visit the affected pages.

Such scripts could be used to steal user credentials, hijack user sessions, deface websites, or perform other malicious actions within the context of the affected site.

Because the attack is stored, the malicious code persists and affects all users who view the compromised content.

Useful 0 Not Useful 0