ID de Prueba:	1.3.6.1.4.1.25623.1.0.805117
Categoría:	Web application abuses
Título:	WordPress W3 Total Cache < 0.9.4.1 XSS Vulnerability - Active Check
Resumen:	WordPress W3 Total Cache is prone to a cross-site scripting; (XSS) vulnerability.
Descripción:	Summary: WordPress W3 Total Cache is prone to a cross-site scripting (XSS) vulnerability. Vulnerability Insight: Flaw is due to improper validation of input that contains the Cache Key and is passed via the URL before returning it to users. Vulnerability Impact: Successful exploitation will allow remote attackers to execute arbitrary HTML and script code in a users browser session in the context of an affected site. Affected Software/OS: WordPress W3 Total Cache versions prior to 0.9.4.1. Solution: Update to version 0.9.4.1 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2014-8724 Bugtraq: 20141217 secuvera-SA-2014-01: Reflected XSS in W3 Total Cache (Google Search) http://www.securityfocus.com/archive/1/534266/100/0/threaded http://packetstormsecurity.com/files/129626/W3-Total-Cache-0.9.4-Cross-Site-Scripting.html https://www.secuvera.de/advisories/secuvera-SA-2014-01.txt
Copyright	Copyright (C) 2014 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.