Stored XSS in MetaSlider WordPress Plugin

Executive Summary

This is a Stored Cross-Site Scripting (XSS) vulnerability in the MetaSlider WordPress plugin. It allows authenticated attackers with custom-level access or higher to inject malicious scripts via the 'delay' setting. The issue occurs due to insufficient input sanitization and output escaping in versions up to 3.111.0.

Useful 0 Not Useful 0

Detection Guidance

Check WordPress sites for the MetaSlider plugin versions up to 3.111.0. Inspect ml-slider posts for malicious scripts in the delay meta setting. Review XML-RPC custom_fields for unauthorized changes to ml-slider_settings.

Useful 0 Not Useful 0

Impact Analysis

An attacker could inject scripts that execute when users access infected pages. This could lead to theft of cookies, session tokens, or other sensitive data. The attack requires Author-level access or higher to set the malicious delay value via XML-RPC custom_fields.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized data access or modification, violating GDPR's integrity and confidentiality principles. For HIPAA, it may risk protected health information exposure. Compliance could be impacted if user data is compromised through this exploit.

Useful 0 Not Useful 0

Mitigation Strategies

Update the MetaSlider plugin to the latest version beyond 3.111.0. Remove untrusted user access to custom_fields and ml-slider_settings. Monitor for unauthorized changes to ml-slider posts.

Useful 0 Not Useful 0