WP-SlimStat WordPress Plugin Cross-Site Scripting Vulnerability

Bugtraq ID:	26432
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 13 2007 12:00AM
Updated:	Apr 15 2011 02:44PM
Credit:	Fracesco Vaj is credited with the discovery of this vulnerability.
Vulnerable:	Wp-Slimstat WP-Slimstat 0.9.2
Not Vulnerable:	Wp-Slimstat WP-Slimstat 2.0

WP-SlimStat WordPress Plugin Cross-Site Scripting Vulnerability

WP-SlimStat Plugin for WordPress is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

This issue affects WP-SlimStat Plugin 0.9.2; other versions may also be vulnerable.

WP-SlimStat WordPress Plugin Cross-Site Scripting Vulnerability

An attacker can exploit this issue by enticing an unsuspecting user to follow a malicious URI.

The following proof-of-concept URI is available:

www.example.com/wp-admin/?page=wp-slimstat/wp-slimstat.php?panel=1&ft=<Script Code>

WP-SlimStat WordPress Plugin Cross-Site Scripting Vulnerability

Solution:
Updates are available; please see the references for more information.

WP-SlimStat WordPress Plugin Cross-Site Scripting Vulnerability

References:

• WordPress Homepage (WordPress)
  
• WP-SlimStat Homepage (WP-SlimStat)