ID de Prueba:	1.3.6.1.4.1.25623.1.0.105958
Categoría:	Web application abuses
Título:	FancyBox for WordPress XSS Vulnerability
Resumen:	FancyBox for WordPress is prone to an XSS vulnerability.
Descripción:	Summary: FancyBox for WordPress is prone to an XSS vulnerability. Vulnerability Insight: The FancyBox for WordPress plugin before 3.0.3 does not properly restrict access, which allows remote attackers to conduct XSS attacks via the mfbfw parameter in an update action to wp-admin/admin-post.php. Vulnerability Impact: Remote attackers may be able to inject arbitrary web script or HTML. Affected Software/OS: FancyBox for WordPress 3.0.2 and below Solution: Upgrade to FancyBox for WordPress 3.0.3 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-1494 BugTraq ID: 72506 http://www.securityfocus.com/bid/72506 http://www.exploit-db.com/exploits/36087 http://blog.sucuri.net/2015/02/zero-day-in-the-fancybox-for-wordpress-plugin.html https://wordpress.org/support/topic/possible-malware-2 http://www.openwall.com/lists/oss-security/2015/02/05/10 http://osvdb.org/show/osvdb/118543
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.