This host is running PivotX and is prone to multiple Cross-site Scripting vulnerabilities.

Successful exploitation will allow attacker to execute arbitrary HTML and script code in a user's browser session in the context of an affected site. Impact Level: Application.

Upgrade to PivotX version 2.2.2 or later For updates refer to http://pivotx.net/

The flaws are due to - Input passed to the 'color' parameter in 'pivotx/includes/blogroll.php', 'src' parameter in 'pivotx/includes/timwrapper.php' is not properly sanitised before being returned to the user.

PivotX version prior to 2.2.2

• http://osvdb.org/70674
• http://secunia.com/advisories/43040
• http://xforce.iss.net/xforce/xfdb/64975

---

Updated on 2015-03-25