Actu
Vigil@nce - WordPress Pie Register: Cross Site Scripting of pass1/pass2
July 2013 by Vigil@nce
This bulletin was written by Vigil@nce : http://vigilance.fr/offer
SYNTHESIS OF THE VULNERABILITY
An attacker can trigger a Cross Site Scripting in the pass1/pass2
parameters of WordPress Pie Register, in order to execute
JavaScript code in the context of the web site.
Impacted products: WordPress Plugins
Severity: 2/4
Creation date: 15/07/2013
DESCRIPTION OF THE VULNERABILITY
The Pie Register plugin offers registration features.
However, it does not filter received data before inserting them in
generated HTML documents.
An attacker can therefore trigger a Cross Site Scripting in the
pass1/pass2 parameters of WordPress Pie Register, in order to
execute JavaScript code in the context of the web site.
ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN
http://vigilance.fr/vulnerability/WordPress-Pie-Register-Cross-Site-Scripting-of-pass1-pass2-13116
