W3 Total Cache, 440d508939c231b4d88a35a4f78ea3fab258d1d8

CVE, Research URL: 440d508939c231b4d88a35a4f78ea3fab258d1d8
Home page URL: Security reports for W3 Total Cache
Application: W3 Total Cache
Published on: Sep 08, 2014
Research Description: W3 Total Cache [w3-total-cache] < 0.9.4.1 W3 Total Cache <= 0.9.4 - Cross-Site Request Forgery leading to Stored Cross-Site Scripting The W3 Total Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.9.4. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page via forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Affected versions: max 0.9.4.1.
Status: vulnerable