Foswiki Cross Site Scripting

`# Exploit Title: Foswiki Cross Site Scripting  
# Date: 2.02.2012  
# Author: Sony  
# Software Link: http://foswiki.org/  
# Google Dorks: intext:powered by foswiki  
# Web Browser : Mozilla Firefox  
# Blog : http://st2tea.blogspot.com  
# PoC:  
http://st2tea.blogspot.com/2012/02/foswiki-cross-site-scripting.html  
  
..................................................................  
  
What is Foswiki?  
  
Foswiki launched in October 2008 after TWiki..[<a href="  
http://en.wikipedia.org/wiki/TWiki">more..</a>]  
  
About TWiki cross site scripting you can read here:  
  
http://packetstormsecurity.org/files/109246/TWiki-Cross-Site-Scripting.html  
  
Well, in Foxwiki:  
  
http://foswiki.org/Main/SonyStyles  
  
http://1.bp.blogspot.com/-XoubozNduj8/TysBtx0o1lI/AAAAAAAAAYs/a9eZhpgfrOU/s1600/%25D0%2591%25D0%25B5%25D0%25B7%25D1%258B%25D0%25BC%25D1%258F%25D0%25BD%25D0%25BD%25D1%258B%25D0%25B9.jpg  
  
In fields "My homepage","Comment",etc..  
  
And yes, a lot of sites with Foswiki vuln.. to xss.  
  
You can see in Google:  
  
powered by foswiki site:edu  
  
uchicago.edu,stanford.edu,umich.edu,mit.edu..etc..  
  
powered by foswiki site:gov  
  
powered by foswiki site:org  
  
etc..  
`