Car Demon Plugin

Name: Car Demon
Type: XSS
Release Date: 19-04-2013
Status: A new version of Car Demon has been released  •

Description:
1) Input passed via the "_msrp_value", "_rebates_value", "_discount_value", "_price_value", " _exterior_color_value", "_interior_color_value", "_mileage_value", "_stock_value", "_images_value", " _cylinders_value", "_doors_value", and "_fuel_type_value" parameters to /wp-admin/post.php (when "post_type" is set to "cars_for_sale") is not properly sanitised before being displayed to the user. This can be exploited to insert arbitrary HTML and script code, which will be executed in a user's browser session in content of an affected site when the malicious data is being viewed.

2) Input passed via the "default_service_name", "default_parts_name", and "default_finance_name" parameters to /wp-admin/edit.php (when "post_type" is set to "cars_for_sale" and "page" is set to "car_demon_plugin_options") is not properly sanitised before being displayed to the user. This can be exploited to insert arbitrary HTML and script code, which will be executed in a user's browser session in content of an affected site when the malicious data is being viewed.