Serendipity Freetag-plugin 'style' parameter Cross Site Scripting Vulnerability

Bugtraq ID:	27697
Class:	Input Validation Error
CVE:	CVE-2008-0751
Remote:	Yes
Local:	No
Published:	Feb 08 2008 12:00AM
Updated:	May 07 2015 05:33PM
Credit:	Alexander Brachmann is credited with the discovery of this vulnerability.
Vulnerable:	S9Y Serendipity Freetag-plugin 2.95
Not Vulnerable:	S9Y Serendipity Freetag-plugin 2.96

Serendipity Freetag-plugin 'style' parameter Cross Site Scripting Vulnerability

Serendipity Freetag-plugin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue could allow an attacker to steal cookie-based authentication credentials and to launch other attacks.

This issue affects Serendipity Freetag-plugin 2.95; prior versions may also be affected.

Serendipity Freetag-plugin 'style' parameter Cross Site Scripting Vulnerability

An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.

http://www.example.com/plugin/tag/%3Cdiv%20style=[XSS]

Serendipity Freetag-plugin 'style' parameter Cross Site Scripting Vulnerability

Solution:
The vendor released an update to address this issue. Please see the reference for more information.


S9Y Serendipity Freetag-plugin 2.95

• S9Y serendipity_event_freetag.zip
  URL: http://spartacus.s9y.org/cvs/additional_plugins/serendipity_event_free tag.zip

Serendipity Freetag-plugin 'style' parameter Cross Site Scripting Vulnerability

References:

• Freetag plugin updated to prevent XSS (SY8)
  
• Serendipity Homepage (S9Y)