Test ID:	1.3.6.1.4.1.25623.1.0.801807
Category:	Web application abuses
Title:	WordPress KSES Library Cross Site Scripting Vulnerability
Summary:	WordPress is prone to a cross-site scripting (XSS) vulnerability.
Description:	Summary: WordPress is prone to a cross-site scripting (XSS) vulnerability. Vulnerability Insight: The flaw is caused by input validation errors in the 'KSES HTML/XHTML' filter (wp-includes/kses.php) when processing user-supplied data, which could be exploited by attackers to execute arbitrary script code on the user's browser session in the security context of an affected site. Vulnerability Impact: Successful exploitation will allow attacker to insert arbitrary HTML and script code, which will be executed in a user's browser session in the context of an affected site when the malicious data is being viewed. Affected Software/OS: WordPress versions prior to 3.0.4 Solution: Update to WordPress version 3.0.4 or later CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-4536 42755 http://secunia.com/advisories/42755 43000 http://secunia.com/advisories/43000 45620 http://www.securityfocus.com/bid/45620 ADV-2010-3335 http://www.vupen.com/english/advisories/2010/3335 ADV-2011-0167 http://www.vupen.com/english/advisories/2011/0167 FEDORA-2011-0306 http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053293.html FEDORA-2011-0315 http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053289.html [oss-security] 20101230 CVE request: wordpress before 3.0.4 XSS http://www.openwall.com/lists/oss-security/2010/12/30/1 http://core.trac.wordpress.org/changeset/17172/branches/3.0 http://wordpress.org/news/2010/12/3-0-4-update/
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.