WP HTML Author Bio < 1.2.0 - Authenticated Stored Cross-Site Scripting via User Bio
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2021-24545. PoCs published by V35HR4J, dnr6419.
AI-analyzed exploit summary The repository provides a functional proof-of-concept for a stored XSS vulnerability in WP HTML Author Bio plugin <= 1.2.0. The exploit involves injecting malicious JavaScript into the Biographical Info field, which executes when a post by the author is viewed.
Description
The WP HTML Author Bio WordPress plugin through 1.2.0 does not sanitise the HTML allowed in the Bio of users, allowing them to use malicious JavaScript code, which will be executed when anyone visit a post in the frontend made by such user. As a result, user with a role as low as author could perform Cross-Site Scripting attacks against users, which could potentially lead to privilege escalation when an admin view the related post/s.
Exploits (2)
The repository provides a functional proof-of-concept for a stored XSS vulnerability in WP HTML Author Bio plugin <= 1.2.0. The exploit involves injecting malicious JavaScript into the Biographical Info field, which executes when a post by the author is viewed.
This repository contains a functional exploit for CVE-2021-24145, targeting an arbitrary file upload vulnerability in the Modern Events Calendar Lite WordPress plugin (versions before 5.16.5). The PoC includes a Python script that authenticates to WordPress and uploads a malicious PHP shell by bypassing content-type checks.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N