Test ID:	1.3.6.1.4.1.25623.1.0.802553
Category:	Web application abuses
Title:	WordPress WHOIS Plugin 'domain' Parameter XSS Vulnerability
Summary:	The WordPress plugin 'WHOIS' is prone to a cross-site scripting (XSS) vulnerability.
Description:	Summary: The WordPress plugin 'WHOIS' is prone to a cross-site scripting (XSS) vulnerability. Vulnerability Insight: The flaw is caused by an input validation error in the 'domain' parameter in '/wp-content/plugins/wordpress-whois-search/wp-whois-ajax.php' when processing user-supplied data. Vulnerability Impact: Successful exploitation will allow attackers to execute arbitrary web script or HTML in a user's browser session in the context of an affected site. Affected Software/OS: WordPress WHOIS Plugin version prior to 1.4.2.3 Solution: Update to WordPress WHOIS Plugin version 1.4.2.3 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-5194 BugTraq ID: 51244 http://www.securityfocus.com/bid/51244 http://packetstormsecurity.org/files/view/108271/wpwhois-xss.txt http://secunia.com/advisories/47428 XForce ISS Database: whoissearch-domain-xss(72074) https://exchange.xforce.ibmcloud.com/vulnerabilities/72074
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.