Vulnerability in Themeisle Multiple Pages Generator by Themeisle

[ Description ]Official description

Multiple Pages Generator by Themeisle before 4.2.5 contains a stored cross-site scripting vulnerability that allows Contributor-level users to inject script via the [mpg] and [mpg_match] shortcode base-url attribute. Attackers can store entity-encoded payloads that pass kses but are decoded by html_entity_decode() and rendered unescaped through {{mpg_url}}, executing script in administrators' browsers.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ References ]References

• plugins.svn.wordpress.org/multiple-pages-generator-by-porthas/tags/4.2.4/controllers/di…
• plugins.svn.wordpress.org/multiple-pages-generator-by-porthas/tags/4.2.4/controllers/di…
• plugins.svn.wordpress.org/multiple-pages-generator-by-porthas/tags/4.2.4/models/CoreMod…
• plugins.trac.wordpress.org/changeset/3742674/multiple-pages-generator-by-porthas
• wordpress.org/plugins/multiple-pages-generator-by-porthas
• www.vulncheck.com/advisories/multiple-pages-generator-by-themeisle-before-4.2.5-stored-…