EXPLOITS

WordPress Plugin Job Manager 0.7.22 - Persistent Cross-Site Scripting

Author: Owais Mehtab
type: webapps
platform: php
port: 80.0
date_added: 2015-08-07  
date_updated: 2015-08-07  
verified: 0  
codes: CVE-2015-2321;OSVDB-125885  
tags: WordPress Plugin  
aliases:   
screenshot_url:   
application_url:   

raw file: 37738.txt  

Job Manager Persistent XSS

Details
========================================================================================
Product: Job Manager Plugin For Wordpress
Vendor-URL: www.wp-jobmanager.com
CVE-ID: CVE-2015-2321


Credits
========================================================================================
Discovered by: Owais Mehtab


Affected Products:
========================================================================================
Job Manager Plugin <= 0.7.22

Description
========================================================================================
"Job Manager Plugin For Wordpress"

More Details
========================================================================================
A persistent Cross site scripting (XSS) in Job Manager Plugin has been discovered,
the plugin's email field was not sanitized thus the vulnerability can be easily
exploited and can be used to steal cookies,perform phishing attacks and other various
attacks compromising the security of a user.

Proof of Concept
========================================================================================
Click on the "send through your résume" and set the below vector in email field

'"><img src=x onerror=prompt(document.cookie);>

Now click on initiate chat

PoC Video
https://www.dropbox.com/s/i8cuf15hbdf5tmu/jobmanager-xss.mp4