There is an XSS vulnerability in SWIFT, replace the search.php file with this search.php.
In case if you are using version less than 2.1.4, or If you don’t want to lose the customization you did find this in <?php echo $_GET['s']; ?> search.php and replace it with (There are 2 occurences)
|
1 |
<?php the_search_query(); ?> |
Even if you are not a swift user you should check your theme for the following vulnerability and fix it ASAP.
Search for something like this in your theme’s PHP files:
|
1 |
Search results for "<?php echo $_GET['s']; ?>" |
and replace with
|
1 |
Search results for "<?php the_search_query(); ?>" |
Note: This vulnerability is taken care in version 3.1.7, so you dont have to do any modifications.
Thanks to Rene Schmidt for reporting this vulnerability.
