WordPress WP-FeedStats HTML Injection Vulnerability

Bugtraq ID:	25085
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 26 2007 12:00AM
Updated:	Jul 27 2007 11:05PM
Credit:	David Kierznowski is credited with the discovery of this vulnerability.
Vulnerable:	WP-FeedStats WP-FeedStats 2.1
Not Vulnerable:	WP-FeedStats WP-FeedStats 2.4

WordPress WP-FeedStats HTML Injection Vulnerability

The WP-FeedStats plugin for WordPress is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data.

Exploiting this issue may allow an attacker to execute HTML and script code in the context of the affected site, to steal cookie-based authentication credentials, or to control how the site is rendered to the user; other attacks are also possible.

This issue affects versions prior to WP-FeedStats 2.4.

WordPress WP-FeedStats HTML Injection Vulnerability

Attackers can use a browser to exploit this issue.

The following example is available:

http://www.example.com/_wp1/?feed=rss2&<script>alert(1)</script>

WordPress WP-FeedStats HTML Injection Vulnerability

Solution:
The vendor has released WP-FeedStats 2.4 to address this issue.


WP-FeedStats WP-FeedStats 2.1

• WP-FeedStats WP-FeedStats 2.4
  http://bueltge.de/wp-content/download/wp/wp-feedstats.zip

WordPress WP-FeedStats HTML Injection Vulnerability

References:

• HIGH RISK: wp-feedstats plugin vulnerable (BlogSecurity)
  
• WP-FeedStats Home Page (WP-FeedStats)