This host is running WordPress with Xili Language plugin and is prone to cross site scripting vulnerability.

Successful exploitation will allow remote attackers to insert arbitrary HTML and script code, which will be executed in a user's browser session in the context of an affected site. Impact Level: Application

Update to Xili Language Plugin version 2.8.5 or later, For updates refer to http://wordpress.org/extend/plugins/xili-language

The input passed via 'lang' parameter to index.php script is not properly validated.

WordPress Xili Language Plugin version 2.8.4.3 and prior

• http://secunia.com/advisories/53364
• http://www.osvdb.org/93233
• http://www.securelist.com/en/advisories/53364

---

Updated on 2015-03-25