search

majeedraza1 / carousel-slider

A WordPress plugin to Create SEO friendly Image, Logo, Video, Post, WooCommerce Product and HTML Content Carousel.
https://wordpress.org/plugins/carousel-slider/
Other
12 stars 3 forks source link

Bug Store XSS with profile image #15

Closed tuannm-1876 closed 4 years ago

tuannm-1876 commented 4 years ago

Hi sayful1, I discovered a Store XSS bug on your plugin. In the information section of the image, I inserted the XSS payload and took the shortcode of the photo slide and inserted a new post with public status. https://i.imgur.com/f1R0YcD.png

I view the post and trigger xss https://i.imgur.com/e3ahiUT.png

The whole process I do with author accounts.