Ability Accessibility Suite Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in the Accessibility Suite by Online ADA, specifically in versions through 4.18. This issue arises from an unrestricted upload of files with dangerous types, allowing malicious users to upload harmful files that could be executed later.

Impact

Exploitation of this vulnerability allows for arbitrary file uploads, which could be used to upload malicious files such as backdoors that are executed to gain further access to the website.

Remediation

Users of the Accessibility Suite by Online ADA should update to version 4.19 or later. Patchstack users can enable auto-update for vulnerable plugins.