SupportEzzy Ticket System - WordPress Plugin Stored XSS

vendor:

SupportEzzy Ticket System - WordPress Plugin

by:

Halil Dalabasmaz

3,3

CVSS

MEDIUM

Stored XSS

CWE

Product Name: SupportEzzy Ticket System - WordPress Plugin

Affected Version From: v1.2.5

Affected Version To: v1.2.5

Patch Exists: NO

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Iceweasel and Chrome

2014

SupportEzzy Ticket System – WordPress Plugin Stored XSS

Register and login to system and then submit new ticket. 'URL (optional)' input is not secure. You can run XSS payloads, use sample payload to test.

Mitigation:

Filter the input fields aganist to XSS attacks.

Source

Exploit-DB raw data:

# Exploit Title: SupportEzzy Ticket System - WordPress Plugin Stored XSS
Vulnerability
# Date: 12-10-2014
# Exploit Author: Halil Dalabasmaz
# Version: v1.2.5
# Vendor Homepage:
http://codecanyon.net/item/supportezzy-ticket-system-wordpress-plugin/8908617
# Software Test Link: http://demo.cssjockey.com/cjsupport/supportezzy/
# Tested on: Iceweasel and Chrome

# Vulnerabilities Description:

===Stored XSS===
Register and login to system and then submit new ticket. "URL (optional)"
input is not secure. You can run XSS payloads, use sample payload to test.

Sample Payload for Stored XSS: http://example.com
"><script>alert(document.cookie);</script>

===Solution===
Filter the input fields aganist to XSS attacks.
===============