WordPress.Super.Cache.Persistent.XSS

Description

This indicates an attack attempt to exploit a Cross-Site Scripting vulnerability in WordPress Super Cache Plugin.
The vulnerability is due to insufficient sanitizing of user-supplied inputs in the application. A remote attacker may be able to exploit this to inject malicious script code into the web pages. When an unsuspecting victim views these crafted web pages via a web browser, the injected script code will be automatically executed.

Affected Products

WordPress Super Cache Plugin 1.4.2 and prior

Impact

System Compromise: Remote attackers can execute arbitrary script code in the context of the affected site.

Recommended Actions

Apply the latest update from the vendor.
https://wordpress.org/plugins/wp-super-cache/

References