ID de Prueba:	1.3.6.1.4.1.25623.1.0.802250
Categoría:	Web application abuses
Título:	WordPress Multiple Themes 's' Parameter Cross Site Scripting Vulnerabilities
Resumen:	at least one Theme of WordPress is prone to a cross site scripting vulnerability.
Descripción:	Summary: at least one Theme of WordPress is prone to a cross site scripting vulnerability. Vulnerability Insight: The flaws are due to improper validation of user-supplied input to the 's' Parameter in multiple themes. Vulnerability Impact: Successful exploitation will allow remote attackers to insert arbitrary HTML and script code, which will be executed in a user's browser session in the context of an affected site. Affected Software/OS: Atahualpa theme before 3.6.8 EvoLve theme before 1.2.6 ZenLite theme before 4.4 Cover WP theme before 1.6.6 F8 Lite theme before 4.2.2 Elegant Grunge theme before 1.0.4 Antisnews theme before 1.10 Pixiv Custom theme before 2.1.6 RedLine theme before 1.66 Solution: Update to latest version of the themes. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-3850 https://sitewat.ch/en/Advisories/8 https://wpvulndb.com/vulnerabilities/9788 http://secunia.com/advisories/46297 Common Vulnerability Exposure (CVE) ID: CVE-2011-3852 https://sitewat.ch/en/Advisories/10 Common Vulnerability Exposure (CVE) ID: CVE-2011-3854 https://sitewat.ch/en/Advisories/12 http://secunia.com/advisories/46296 Common Vulnerability Exposure (CVE) ID: CVE-2011-3855 https://sitewat.ch/en/Advisories/13 Common Vulnerability Exposure (CVE) ID: CVE-2011-3856 https://sitewat.ch/en/Advisories/14 Common Vulnerability Exposure (CVE) ID: CVE-2011-3857 https://sitewat.ch/en/Advisories/15 Common Vulnerability Exposure (CVE) ID: CVE-2011-3858 https://sitewat.ch/en/Advisories/16 Common Vulnerability Exposure (CVE) ID: CVE-2011-3860 BugTraq ID: 50334 http://www.securityfocus.com/bid/50334 https://sitewat.ch/en/Advisories/18 Common Vulnerability Exposure (CVE) ID: CVE-2011-3863 https://sitewat.ch/en/Advisories/22
Copyright	Copyright (C) 2011 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.