Headline
WordPress Accessibility Help Button 1.1 Cross Site Scripting
WordPress Accessibility Help Button plugin version 1.1 suffers from a cross site scripting vulnerability.
# Exploit Title: WordPress Plugin Accessibility Help Button – StoredCross Site Scripting.# Date: 2-04-2023# Exploit Author: Taliya Bilal- NightHawk# Vendor Homepage: https://wordpress.com/plugins/accessibility-help-button# Version: 1.1# Tested on: Firefox# Contact me: [email protected]# Steps to reproduce:1. Install Accessibility Help Button WordPress plugin and activate.2. Go to Options and on Button Text input field inject XSS payload<script>alert('XSS')</script>3. Fill out the whole form and click the save button below.3. XSS will trigger.#Screenshot:https://freeimage.host/i/HOBXWqg