<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>hiredhacker.com &#187; wordpress</title>
	<atom:link href="http://www.hiredhacker.com/tag/wordpress/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.hiredhacker.com</link>
	<description>relevant ramblings of an ethical hacker</description>
	<lastBuildDate>Sat, 05 Jun 2010 17:36:30 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
		<item>
		<title>XSS in WP Contact Form III.</title>
		<link>http://www.hiredhacker.com/2008/02/02/xss-in-wp-contact-form-iii/</link>
		<comments>http://www.hiredhacker.com/2008/02/02/xss-in-wp-contact-form-iii/#comments</comments>
		<pubDate>Sat, 02 Feb 2008 17:46:20 +0000</pubDate>
		<dc:creator>Gerry Eisenhaur</dc:creator>
				<category><![CDATA[Content]]></category>
		<category><![CDATA[0day]]></category>
		<category><![CDATA[advisory]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[wordpress]]></category>
		<category><![CDATA[xss]]></category>

		<guid isPermaLink="false">http://www.hiredhacker.com/2008/02/02/xss-in-wp-contact-form-iii/</guid>
		<description><![CDATA[The WP Contact Form III 1.4.1 WordPress plugin by &#8216;KristinKWangen&#8217; is vulnerable to multiple cross site scripting attacks. Note to developers, this does not stop script injection attacks: From wp-contactform.php line 105: $_POST['wpcf_your_name'] = stripslashes(trim($_POST['wpcf_your_name'])); Also note that this is not a very good way to die: From buttonsnap.php line 28: $selection = isset($_POST['selection']) ? [...]]]></description>
		<wfw:commentRss>http://www.hiredhacker.com/2008/02/02/xss-in-wp-contact-form-iii/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
	</channel>
</rss>
