sitelock xss vulnerability

Phoca Gallery - image gallery extension
apsnemsf
Phoca Newbie
Phoca Newbie
Posts: 2
Joined: 24 Mar 2014, 16:23

sitelock xss vulnerability

Post by apsnemsf »

Hello,
I have received the following from a sitelock scan of my site:

URL:http://www.adventureparagliding.com/ind ... ed20cbd373
feb8d=1
Cross site scripting vulnerability found in args:0a642c3915808c407ed20cbd373feb8d,controller
URL:http://www.adventureparagliding.com/ind ... ed20cbd373
feb8d=1&586bb09e58848feaa9b484e3a1ddf34d=1
Cross site scripting vulnerability found in args:0a642c3915808c407ed20cbd373feb8d,586bb09e58848feaa9b484e3a1ddf34d,controller
URL:http://www.adventureparagliding.com/ind ... 9b484e3a1d
df34d=1
Cross site scripting vulnerability found in args:586bb09e58848feaa9b484e3a1ddf34d,controller
I have the most updated version of phoca gallery and not sure why i am getting this problem. Please advise.
User avatar
Jan
Phoca Hero
Phoca Hero
Posts: 49144
Joined: 10 Nov 2007, 18:23
Location: Czech Republic
Contact:

Re: sitelock xss vulnerability

Post by Jan »

Hi, which version of Phoca Gallery you are using, testing now cannot confirm any issue with the links :idea:
If you find Phoca extensions useful, please support the project
apsnemsf
Phoca Newbie
Phoca Newbie
Posts: 2
Joined: 24 Mar 2014, 16:23

Re: sitelock xss vulnerability

Post by apsnemsf »

Version

3.2.7

Sitelock says the above reference files as well as several others of the same origination are xss vulnerable and have removed my badge from my page.
User avatar
Jan
Phoca Hero
Phoca Hero
Posts: 49144
Joined: 10 Nov 2007, 18:23
Location: Czech Republic
Contact:

Re: sitelock xss vulnerability

Post by Jan »

Hi, testing now again and see nothing vulnerable in the code above :idea:

Jan
If you find Phoca extensions useful, please support the project
Post Reply