This host is running WordPress with Symposium plugin and is prone to cross site scripting vulnerability.

Successful exploitation will allow remote attackers to insert arbitrary HTML and script code, which will be executed in a user's browser session in the context of an affected site. Impact Level: Application

Upgrade Wordpress Symposium Plugin version 13.04 or later, For updates refer to http://wordpress.org/extend/plugins/wp-symposium

The input passed via 'u' parameters to 'wordpress/wp-content/plugins/wp-symposium/invite.php' script is not properly validated before being returned to the user.

WordPress Symposium Plugin version 13.02 and prior

• http://nakedsecurity.com/nsa/246758.htm
• http://www.osvdb.org/92275
• http://www.securelist.com/en/advisories/52864

---

Updated on 2015-03-25