WordPress WP-Cumulus Plugin Cross-Site Scripting Vulnerability

Bugtraq ID:	37102
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 27 2009 12:00AM
Updated:	Nov 23 2009 10:35PM
Credit:	Thomas Scholz
Vulnerable:	WP-Cumulus WP-Cumulus 1.21 WP-Cumulus WP-Cumulus 1.20 WP-Cumulus WP-Cumulus 1.19 WP-Cumulus WP-Cumulus 1.18 WP-Cumulus WP-Cumulus 1.17 WP-Cumulus WP-Cumulus 1.16 WP-Cumulus WP-Cumulus 1.15 WP-Cumulus WP-Cumulus 1.14 WP-Cumulus WP-Cumulus 1.13 WP-Cumulus WP-Cumulus 1.12 WP-Cumulus WP-Cumulus 1.11 WP-Cumulus WP-Cumulus 1.1 WP-Cumulus WP-Cumulus 1.05 WP-Cumulus WP-Cumulus 1.04 WP-Cumulus WP-Cumulus 1.03 WP-Cumulus WP-Cumulus 1.02 WP-Cumulus WP-Cumulus 1.01 WP-Cumulus WP-Cumulus 1.00
Not Vulnerable:	WP-Cumulus WP-Cumulus 1.22

WordPress WP-Cumulus Plugin Cross-Site Scripting Vulnerability

The WP-Cumulus plugin for WordPress is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Versions prior to WP-Cumulus 1.22 are vulnerable.

WordPress WP-Cumulus Plugin Cross-Site Scripting Vulnerability

An attacker can exploit this issue by enticing an unsuspecting user to follow a malicious URI.

WordPress WP-Cumulus Plugin Cross-Site Scripting Vulnerability

Solution:
A vendor update is available. Please contact the vendor for details.

WordPress WP-Cumulus Plugin Cross-Site Scripting Vulnerability

References:

• Wordpress church_admin Plugin "id" Cross-Site Scripting Vulnerability (Sammy Forgit)
  
• WP-Cumulus 1.22 fixes a security hole, please upgrade! (Roy)
  
• WP-Cumulus Product Page (WP-Cumulus)