WordPress Edit-Post-Rows.PHP Cross-Site Scripting Vulnerability

Bugtraq ID:	26228
Class:	Input Validation Error
CVE:	CVE-2007-5710
Remote:	Yes
Local:	No
Published:	Oct 29 2007 12:00AM
Updated:	May 07 2015 05:34PM
Credit:	Janek Vind 'waraxe' is credited with the discovery of this vulnerability.
Vulnerable:	WordPress WordPress 2.3
Not Vulnerable:	WordPress WordPress 2.3.1

WordPress Edit-Post-Rows.PHP Cross-Site Scripting Vulnerability

WordPress is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

This issue affects WordPress 2.3; other versions may also be vulnerable.

WordPress Edit-Post-Rows.PHP Cross-Site Scripting Vulnerability

An attacker can exploit this issue by enticing an unsuspecting user to follow a malicious URI.

The following proof-of-concept URI is available:

• /data/vulnerabilities/exploits/26228.html

WordPress Edit-Post-Rows.PHP Cross-Site Scripting Vulnerability

Solution:
UPDATE (December 10, 2007): The vendor indicates that WordPress 2.3.1 has addressed this issue. Please see the references for more information.


WordPress WordPress 2.3

• WordPress latest.tar.gz
  http://wordpress.org/latest.tar.gz

WordPress Edit-Post-Rows.PHP Cross-Site Scripting Vulnerability

References:

• [waraxe-2007-SA#059] - XSS in WordPress 2.3 (Janek Vind "waraxe")
  
• Wordpress church_admin Plugin "id" Cross-Site Scripting Vulnerability (Sammy Forgit)
  
• [waraxe-2007-SA#059] - XSS in WordPress 2.3 ([email protected])