提交 #50191: EmbedPress Stored XSS

xss vulnerability in latest EmbedPress wordpress plugin and post edit

we can insert xss payload like javascript:alert and submit to post

[embedpress_pdf]javascript:alert(document.location.href)[/embedpress_pdf]

1. install EmbedPress wordpress plugin
2. create new shortcode or exist shortcode
3. goto posts and create or edit exist post
4. insert payload like that
[embedpress_pdf]javascript:alert(document.location.href)[/embedpress_pdf]
5. submit and goto posts view

POC:
https://drive.google.com/file/d/1wZXBTvdHO5egFo06gxCF06hWX7tbb5Ud/view?usp=sharing
https://drive.google.com/file/d/1ikhbybTAEFVbZ3OdWNvUocl8nRhff-Kc/view?usp=sharing

• 用户: rezaduty (UID 10530)
• 提交: 2022-10-31 08時28分 (4 年前)
• 管理: 2022-10-31 15時08分 (7 hours later)
• 状态: 重复
• VulDB条目: 212503 [EmbedPress Plugin 于 WordPress Shortcode post.php 跨网站脚本]
• 原因: not possible without admin permissions
• 积分: 0