Stored Cross-Site Scripting in Ocean Extra oceanwp_library Shortcode

Skrevet den af i Ocean Extra

The oceanwp_library shortcode used its id attribute without validating it, and echoed the raw attribute back as template content when no matching library template existed. A contributor-level user who can place the shortcode in a post could inject arbitrary JavaScript that runs in the browser of anyone viewing the page.

This vulnerability affects the following application versions:

  • Ocean Extra 1.3.3
  • Ocean Extra 1.3.4
  • Ocean Extra 1.3.5
  • Ocean Extra 1.3.6
  • Ocean Extra 1.3.7
  • Ocean Extra 1.3.8
  • Ocean Extra 1.3.9
  • Ocean Extra 1.3.10
  • Ocean Extra 1.4.0
  • Ocean Extra 1.4.1
  • Ocean Extra 1.4.2
  • Ocean Extra 1.4.3
  • Ocean Extra 1.4.4
  • Ocean Extra 1.4.5
  • Ocean Extra 1.4.6
  • Ocean Extra 1.4.7
  • Ocean Extra 1.4.8
  • Ocean Extra 1.4.9
  • Ocean Extra 1.4.10
  • Ocean Extra 1.4.11
  • Ocean Extra 1.4.12
  • Ocean Extra 1.4.13
  • Ocean Extra 1.4.14
  • Ocean Extra 1.4.15
  • Ocean Extra 1.4.16
  • Ocean Extra 1.4.17
  • Ocean Extra 1.4.18
  • Ocean Extra 1.4.19
  • Ocean Extra 1.4.20
  • Ocean Extra 1.4.21
  • Ocean Extra 1.4.22
  • Ocean Extra 1.4.23
  • Ocean Extra 1.4.24
  • Ocean Extra 1.4.25
  • Ocean Extra 1.4.26
  • Ocean Extra 1.4.27
  • Ocean Extra 1.4.28
  • Ocean Extra 1.4.29
  • Ocean Extra 1.4.30
  • Ocean Extra 1.5.0
  • Ocean Extra 1.5.1
  • Ocean Extra 1.5.2
  • Ocean Extra 1.5.3
  • Ocean Extra 1.5.4
  • Ocean Extra 1.5.12
  • Ocean Extra 1.5.14
  • Ocean Extra 1.5.15
  • Ocean Extra 1.5.16
  • Ocean Extra 1.5.18
  • Ocean Extra 1.5.19
  • Ocean Extra 1.5.20
  • Ocean Extra 1.6.0
  • Ocean Extra 1.6.1
  • Ocean Extra 1.6.2
  • Ocean Extra 1.6.3
  • Ocean Extra 1.6.4
  • Ocean Extra 1.6.5
  • Ocean Extra 2.1.0
  • Ocean Extra 2.1.1
  • Ocean Extra 2.1.2
  • Ocean Extra 2.1.3
  • Ocean Extra 2.1.4
  • Ocean Extra 2.1.5
  • Ocean Extra 2.1.6
  • Ocean Extra 2.1.7
  • Ocean Extra 2.1.8
  • Ocean Extra 2.2.0
  • Ocean Extra 2.2.1
  • Ocean Extra 2.2.2
  • Ocean Extra 2.2.3
  • Ocean Extra 2.2.4
  • Ocean Extra 2.2.5
  • Ocean Extra 2.2.6
  • Ocean Extra 2.2.7
  • Ocean Extra 2.2.8
  • Ocean Extra 2.2.9
  • Ocean Extra 2.3.0
  • Ocean Extra 2.3.1
  • Ocean Extra 2.4.0
  • Ocean Extra 2.4.1
  • Ocean Extra 2.4.2
  • Ocean Extra 2.4.3
  • Ocean Extra 2.4.4
  • Ocean Extra 2.4.5
  • Ocean Extra 2.4.6
  • Ocean Extra 2.4.7
  • Ocean Extra 2.4.8
  • Ocean Extra 2.4.9