Thursday, July 16, 2009

WordPress 2.8.1 XSS

One of the famous Chinese blog website published PoC article regarding XSS in WordPress 2.8.1
This XSS can be triggered once the mouse pointer to posted crafted url within WordPress comments section. Showed in Example that the final destination link will redirect to http://www.inbreak.net/a.php

Translated webpage can be view by using Google translator ( accuracy is >90%) :)

0 comments: