Tickera WordPress Plugin Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in the Tickera WordPress plugin, specifically in versions up to and including 3.6.0.0. The issue arises from inadequate input sanitization and output escaping in the 'price_wrapper' shortcode attribute. This vulnerability allows authenticated attackers with contributor-level access or higher to inject arbitrary scripts into pages. The injected scripts are executed when a user accesses the page, but only if the corresponding ticket ID is present in their cart cookie.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user viewing the page.

Reproduction

To reproduce this vulnerability, an authenticated user with contributor-level access or higher can inject a script via the 'price_wrapper' shortcode attribute. Once the script is injected, it will be executed for users who have the corresponding ticket ID in their cart cookie.

Remediation

Users can update to the latest version of the Tickera WordPress plugin to address this vulnerability.