Advanced WPMU Plugin Manager - Reflected cross-site scripting (XSS)

 179 | function awpm_load_site_plugin(){
 180 | switch_to_blog($_REQUEST['blog_id']);
 181 | ?>
 182 | <h2><?PHP echo sprintf(__('Plugin Status of s site','awpm'), get_bloginfo('site_name')); ?></h2>
 183 | <?PHP
 184 | include 'class/plugin_table.php';
 185 | $plugins_list = new awpm_plugin_list();
 186 | $plugins=get_plugins();
 187 | foreach($plugins as $key=>$plugin){
 188 | $plugin['file']=$key;
 189 | $new_plugins[]=$plugin;
 190 | }
 191 | $table_array['data']=$new_plugins;
 192 | $plugins_list->prepare_items($table_array);
 193 | ?>
 194 | <form>
> 195 | <input type=""hidden"" name=""blog_id"" id=""blog_id"" value=""<?PHP echo $_REQUEST['blog_id']; ?>"" />
 196 | <?PHP
 197 | $plugins_list->display();
 198 | ?>
 199 | </form>
 200 | <div id=""exe"" style=""visibility:hidden;""></div>
 201 | <script type=""text/javascript"">
 202 | jQuery('.loading').hide();
 203 | </script>
  204 |     <?PHP
  205 |     die('');
  206 | }
      ^ Col 0