WordPress Walk Score Plugin Multiple Cross Site Scripting Vulnerabilities

Bugtraq ID:	69507
Class:	Input Validation Error
CVE:	CVE-2014-4573
Remote:	Yes
Local:	No
Published:	Jun 12 2014 12:00AM
Updated:	Jun 12 2014 12:00AM
Credit:	Anant Shrivastava
Vulnerable:	Walk Score Project Walk Score 0.5.5 - ~-~-~Wordpre
Not Vulnerable:

WordPress Walk Score Plugin Multiple Cross Site Scripting Vulnerabilities

The Walk Score plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Walk Score versions 0.5.5 and prior are vulnerable.

WordPress Walk Score Plugin Multiple Cross Site Scripting Vulnerabilities

To exploit these issues an attacker must entice an unsuspecting victim to follow a malicious URI.

The following example URI is available:

http://www.example.com/wp-content/plugins/walk-score/frame-maker.php?a=a&s=sâ??>alert(document.cookie)&id=id&o=oâ??>alert(document.cookie)&

WordPress Walk Score Plugin Multiple Cross Site Scripting Vulnerabilities

References:

• WordPress HomePage (WordPress)
  
• wp-plugin : walk-score �?? A3-Cross-Site Scripting (XSS) (CodeVigilant)