Signature Detail

HTTP: WordPress Universal Post Manager Plugin Cross Site Scripting

This signature detects attempts to exploit a cross-site scripting vulnerability in WordPress Universal Post Manager. It is due to insufficient validation of user-supplied input. Attackers can steal cookie-based authentication credentials and launch other attacks.

Extended Description

Universal Post Manager WordPress plugin is prone to multiple SQL-injection and cross-site scripting vulnerabilities. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. Universal Post Manager 1.0.9 is vulnerable; other versions may also be affected.

Affected Products

• Artyom Chakhoyan Universal Post Manager 1.0.9

References

• BugTraq: 47426
• URL: http://profprojects.com/wordpress-plugins/free-wordpress-plugins/universal-post-manager/universal-post-manager-1-0-9-release/