This host is installed with WordPress WHOIS plugin and is prone to cross-site scripting vulnerability.

Successful exploitation will allow attackers to execute arbitrary web script or HTML in a user's browser session in the context of an affected site. Impact Level: Application

Upgrade to WordPress WHOIS Plugin version 1.4.2.3 or later For updates refer to http://wordpress.org/extend/plugins/wordpress-whois-search/download/

The flaw is caused by an input validation error in the 'domain' parameter in '/wp-content/plugins/wordpress-whois-search/wp-whois-ajax.php' when processing user-supplied data.

WordPress WHOIS Plugin version prior to 1.4.2.3

• http://packetstormsecurity.org/files/108271/wpwhois-xss.txt
• http://secunia.com/advisories/47428/
• http://www.securityfocus.com/bid/51244/info

---

Updated on 2017-03-28