HandL UTM Grabber/Tracker WordPress Plugin Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in the HandL UTM Grabber/Tracker WordPress plugin, affecting versions prior to 2.8.1. The issue arises because the plugin fails to properly sanitize and escape a parameter before displaying it on the page. This vulnerability could be exploited against users with high privileges, such as administrators.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Reproduction

To reproduce this vulnerability, create a post as a contributor and include the vulnerable shortcode [handl_landing_page]. After publishing the post, retrieve its URL and append an XSS payload to an arbitrarily named parameter. When the URL is accessed, the injected script will execute, demonstrating the cross-site scripting vulnerability.

Remediation

Users are advised to update the HandL UTM Grabber/Tracker WordPress plugin to version 2.8.1 or later.