Executive brief
The MinhNhut Link Gateway plugin for WordPress, which manages link redirection, contains a security flaw that allows attackers to run malicious scripts in a user's browser. By tricking a site visitor or administrator into clicking a specifically crafted link, an attacker could steal session information or perform unauthorized actions on their behalf. This risk primarily affects the privacy and security of users interacting with the website's redirected links.
Technical details
A Reflected Cross-Site Scripting (XSS) vulnerability exists in the MinhNhut Link Gateway plugin for WordPress due to improper handling of the 'url' parameter on the redirect page. The vulnerability is located in the plugin's redirection templates where user-supplied input is not sufficiently sanitized or escaped before being rendered in the HTML output. An unauthenticated attacker can exploit this by crafting a malicious URL containing JavaScript and persuading a user to visit it. Successful exploitation allows for the execution of arbitrary web scripts in the context of the victim's browser session, potentially leading to cookie theft or unauthorized administrative actions if the victim is a site manager.
Affected products
- MinhNhut MinhNhut Link Gateway <= 3.6.1
Timeline
- 2026-05-27: disclosed: Vulnerability published to NVD