Download Monitor 'sort' Parameter Cross Site Scripting Vulnerability

Bugtraq ID:	61836
Class:	Input Validation Error
CVE:	CVE-2013-5098
Remote:	Yes
Local:	No
Published:	Jul 23 2013 12:00AM
Updated:	Jul 23 2013 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	WordPress Download Monitor 3.3.6.1
Not Vulnerable:	WordPress Download Monitor 3.3.6.2

Download Monitor 'sort' Parameter Cross Site Scripting Vulnerability

The Download Monitor plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Note: This issue was previously discussed in the Bid 61407 (Download Monitor 'admin.php' Multiple Cross Site Scripting Vulnerabilities) but has been moved to its own record to better document it.

Download Monitor versions prior to 3.3.6.2 are vulnerable.

Download Monitor 'sort' Parameter Cross Site Scripting Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Download Monitor 'sort' Parameter Cross Site Scripting Vulnerability

References:

• Changeset 723187 for download-monitor (jolley_small)
  
• Download Monitor Homepage (Wordpress)