The Correct Prices plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $_SERVER['PHP_SELF'] variable in versions up to and including 1.0. This is due to the correct_prices_page() function echoing $_SERVER['PHP_SELF'] into a form's action attribute without any input sanitization or output escaping (such as esc_url() or esc_attr()). Because PHP_SELF reflects attacker-controlled path-info appended to the script URL, an attacker can break out of the attribute and inject arbitrary markup. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a specially crafted link.
The Correct Prices WordPress plugin versions up to 1.0 contains a reflected XSS vulnerability in the correct_prices_page() function that fails to sanitize the $_SERVER['PHP_SELF'] variable before echoing it into a form action attribute. Unauthenticated attackers can inject arbitrary JavaScript by crafting malicious URLs and tricking users into clicking them.
تحتوي إضافة Correct Prices لـ WordPress على ثغرة XSS منعكسة في الإصدارات حتى 1.0 حيث تفشل دالة correct_prices_page() في تعقيم متغير $_SERVER['PHP_SELF'] قبل إدراجه في سمة action الخاصة بالنموذج. يمكن للمهاجمين غير المصرح لهم حقن رموز JavaScript عشوائية من خلال روابط ضارة مصممة خصيصاً.
The Correct Prices WordPress plugin versions up to 1.0 contains a reflected XSS vulnerability in the correct_prices_page() function that fails to sanitize the $_SERVER['PHP_SELF'] variable before echoing it into a form action attribute. Unauthenticated attackers can inject arbitrary JavaScript by crafting malicious URLs and tricking users into clicking them.
Update the Correct Prices plugin to version 1.1 or later immediately. Implement input validation and output escaping using esc_url() or esc_attr() functions for all user-controlled data. Review and audit all form submissions and URL parameters for similar vulnerabilities. Consider implementing Content Security Policy (CSP) headers to mitigate XSS attacks.
قم بتحديث إضافة Correct Prices إلى الإصدار 1.1 أو أحدث فوراً. قم بتطبيق التحقق من المدخلات والتهريب الآمن للمخرجات باستخدام دوال esc_url() أو esc_attr(). قم بمراجعة وتدقيق جميع عمليات إرسال النماذج ومعاملات URL للبحث عن ثغرات مماثلة. فكر في تطبيق رؤوس Content Security Policy (CSP) للتخفيف من هجمات XSS.