Test Kennung:	1.3.6.1.4.1.25623.1.0.805763
Kategorie:	Web application abuses
Titel:	WordPress Pie Register Cross-Site Scripting Vulnerability
Zusammenfassung:	The host is installed with wordpress; pie register plugin and is prone to cross-site scripting vulnerability.
Beschreibung:	Summary: The host is installed with wordpress pie register plugin and is prone to cross-site scripting vulnerability. Vulnerability Insight: Flaw exists as input passed via the 'invitaion_code' parameter is not properly sanitized before being returned to the user. Vulnerability Impact: Successful exploitation will allow remote attackers to execute arbitrary HTML and script code in a user's browser session in context of an affected site. Affected Software/OS: WordPress Pie Register version before 2.0.19. Solution: Upgrade to Pie Register version 2.0.19 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2015-7377 Bugtraq: 20151012 CVE-2015-7377: Unauthenticated Reflected XSS in Pie Register WordPress Plugin (Google Search) http://www.securityfocus.com/archive/1/536668/100/0/threaded http://packetstormsecurity.com/files/133928/WordPress-Pie-Register-2.0.18-Cross-Site-Scripting.html https://wpvulndb.com/vulnerabilities/8212
Copyright	Copyright (C) 2015 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.