Phoca Forum

Hello,
I have received the following from a sitelock scan of my site:

URL:http://www.adventureparagliding.com/ind ... ed20cbd373
feb8d=1
Cross site scripting vulnerability found in args:0a642c3915808c407ed20cbd373feb8d,controller
URL:http://www.adventureparagliding.com/ind ... ed20cbd373
feb8d=1&586bb09e58848feaa9b484e3a1ddf34d=1
Cross site scripting vulnerability found in args:0a642c3915808c407ed20cbd373feb8d,586bb09e58848feaa9b484e3a1ddf34d,controller
URL:http://www.adventureparagliding.com/ind ... 9b484e3a1d
df34d=1
Cross site scripting vulnerability found in args:586bb09e58848feaa9b484e3a1ddf34d,controller
I have the most updated version of phoca gallery and not sure why i am getting this problem. Please advise.

Hi, which version of Phoca Gallery you are using, testing now cannot confirm any issue with the links

Version

3.2.7

Sitelock says the above reference files as well as several others of the same origination are xss vulnerable and have removed my badge from my page.

Hi, testing now again and see nothing vulnerable in the code above

Jan