QID 150848

ProfilePress is a powerful ecommerce and paid membership plugin for accepting one-time and recurring payments, selling subscriptions and digital products or digital downloads (downloadable files) via Bank Transfer, Stripe, PayPal, RazorPay, Mollie and Paystack, paywall and restrict content and control user access.

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile and Restrict Content ProfilePress plugin for WordPress is vulnerable to Stored Cross Site Scripting via the plugins shortcode due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Affected Versions:
WordPress The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile abd Restrict Content ProfilePress Plugin before 4.15.2

QID Detection Logic:
This QID sends a HTTP GET request and checks for vulnerable version of WordPress plugin running on the target application.

Successful exploitation of this vulnerability could allow an unauthenticated attacker to inject arbitrary JavaScript code in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.