WP Super Cache, 668810ebdc106dd2c5ed3f93a450096cec74f4a8

CVE, Research URL: 668810ebdc106dd2c5ed3f93a450096cec74f4a8
Home page URL: Security reports for WP Super Cache
Application: WP Super Cache
Published on: Apr 07, 2015
Research Description: WP Super Cache [wp-super-cache] < 1.4.3 WP Super Cache < 1.4.3 - Cross Site Scripting The WP Super Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `$details[ ‘key’ ]` value in versions up to, and including, 1.4.3 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Affected versions: max 1.4.3.
Status: vulnerable