CGI Generic XSS (persistent, 3rd Pass)

This script is Copyright (C) 2011-2015 Tenable Network Security, Inc.

Synopsis :

A CGI application hosted on the remote web server is potentially
prone to cross-site scripting attacks.

Description :

The remote web server hosts one or more CGI scripts that fail to
adequately sanitize request strings containing malicious JavaScript.
By leveraging this issue, an attacker may be able to cause arbitrary
HTML and script code to be executed in a user's browser within the
security context of the affected site.

This script identified patterns that were injected to test 'reflected'
(aka 'non-persistent') XSS. The issues are likely to be 'persistent'
(or 'stored') after all.

See also :

Solution :

Restrict access to the vulnerable application and contact the vendor
for a patch or upgrade.

Risk factor :

Medium / CVSS Base Score : 4.3

Family: CGI abuses : XSS

Nessus Plugin ID: 52483 ()

Bugtraq ID:


Ready to Scan Unlimited IPs & Run Compliance Checks?

Upgrade to Nessus Professional today!

Buy Now

Combine the Power of Nessus with the Ease of Cloud

Start your free Nessus Cloud trial now!

Begin Free Trial