The host is running WordPress MU and is prone to Cross-Site Scripting Vulnerability.

Successful exploitation will let the attacker execute malicious crafted HTTP headers and conduct cross site scripting attacks to gain administrative privileges into the affected web application. Impact Level: Application

Update to Version 2.7 http://mu.wordpress.org/download

The vulnerability is due to improper validation of user supplied input in 'wp-includes/wpmu-functions.php' for choose_primary_blog function.

WordPress MU before 2.7 on all running platform.

• http://securitytracker.com/alerts/2009/Mar/1021838.html
• http://xforce.iss.net/xforce/xfdb/49184

---

Updated on 2017-03-28