This host is installed with WordPress WPtouch Plugin and is prone to cross-site scripting vulnerability.

Successful exploitation will allow attackers to execute arbitrary web script or HTML in a user's browser session in the context of an affected site. Impact Level: Application

Upgarde to 3.1.1 or later, For updates refer to http://wordpress.org/extend/plugins/wptouch

The flaw is due to input validation error in 'wptouch_settings' parameter to 'wp-content/plugins/wptouch/include/adsense-new.php', which is not properly sanitised before being returned to the user.

WordPress WPtouch Plugin 1.9.19.4 and 1.9.20, other versions may also be affected.

• http://osvdb.org/69538
• http://secunia.com/advisories/42438
• http://www.htbridge.ch/advisory/xss_in_wptouch_wordpress_plugin.html

---

Updated on 2015-03-25