3d2c0acf_curity_Updates___Core_Security__Description
[Released Date] 05.11.2015 [Title] Wordpress Comments XSS Exploit [Vulnerabilty] NOCVE-9999-71907 [Category] Exploits/Cross Site Scripting (XSS)/Known Vulnerabilities [Platform] Linux [Description] 
A cross-site scripting vulnerability exists in the comments rendering in Wordpress 4.1.1 and previous versions. This exploit abuses a persistent cross site scripting vulnerability in Wordpress to install an OS Agent in the server running the Wordpress installation. This update includes a module that posts a comment with the cross site scripting code as a comment in a Wordpress post. The javascript code will attempt to install a Wordpress plugin everytime the post comment is rendered. The plugin will in turn install an OS agent in the server running Wordpress. This update adds the option to use the module in a verification mode, so a comment can be posted to verify if it would be moderated with the current webapps scenario in use.
Core Impact Pro Exploits and Security Updates | Core Security