{"id":32440,"date":"2011-11-22T04:43:58","date_gmt":"2011-11-22T04:43:58","guid":{"rendered":"https:\/\/id.wordpress.org\/support\/2011\/11\/22\/xsscross-site-scripting-di-advanced-text-widget-plugin-bise-me-remote-server\/"},"modified":"2011-11-22T04:43:58","modified_gmt":"2011-11-22T04:43:58","slug":"xsscross-site-scripting-di-advanced-text-widget-plugin-bise-me-remote-server","status":"closed","type":"topic","link":"https:\/\/id.wordpress.org\/support\/topic\/xsscross-site-scripting-di-advanced-text-widget-plugin-bise-me-remote-server\/","title":{"rendered":"XSS(cross site scripting) di advanced-text-widget Plugin Bisa me-remote server."},"content":{"rendered":"

Widget advanced-text-widget Plugin rentan akan Xss Injecton. Dan bisa di injeksi untuk me-remote server. bugs ini di temukan tgl 21-november 2011 oleh peretas Iran.<\/p>\n

Bugtraq : http:\/\/seclists.org\/bugtraq\/2011\/Nov\/133<\/a><\/p>\n

contoh bugs\/exploit: http:\/\/www.site.com\/path\/wp-content\/plugins\/advanced-text-widget\/advancedtext.php?page=xss
\nGoogle dork : “Powered by WordPress”
\nVersi wordpress: Semua versi.<\/p>\n

Solusi: de-activated\/non aktifkan pluginadvanced-text-widget.<\/p>\n","protected":false},"template":"","class_list":["post-32440","topic","type-topic","status-closed","hentry","topic-tag-plugin","topic-tag-xss-injection"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/id.wordpress.org\/support\/wp-json\/wp\/v2\/topic\/32440","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/id.wordpress.org\/support\/wp-json\/wp\/v2\/topic"}],"about":[{"href":"https:\/\/id.wordpress.org\/support\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":0,"href":"https:\/\/id.wordpress.org\/support\/wp-json\/wp\/v2\/topic\/32440\/revisions"}],"wp:attachment":[{"href":"https:\/\/id.wordpress.org\/support\/wp-json\/wp\/v2\/media?parent=32440"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}