Library Viewer WordPress Plugin Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in the Library Viewer WordPress plugin, affecting versions prior to 3.2.0. The issue arises because the plugin fails to properly sanitize and escape certain parameters before displaying them on the page. This vulnerability could be exploited against users with high privileges, such as administrators.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Reproduction

To reproduce this vulnerability, add the directory 'library' to the site root, making it accessible at '/library'. Then, create a page that includes the shortcode '[library-viewer]'. After that, access the page with the shortcode and append a parameter that includes an image tag with an 'onerror' event, such as 'library-viewer-error-message' or 'library-viewer-success-message'. This will trigger the cross-site scripting vulnerability by executing the injected script.

Remediation

Users are advised to update the Library Viewer WordPress plugin to version 3.2.0 or later.