Package illustrating a test case

Test case 149235

Type: source code
State: bad
Author: Charles Oliveira
Status: candidate
Language: PHP
Application: cpe:2.3:a:wordpress:wordpress:2.0:-:*:*:*:*:*:*
Submission Date: 01 Apr 2015

Description

The test case shows that the field $user_email is being printed out without any neutralization for XSS.

Flaws

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Test Suites

WordPress 2.0

Have any comments on this test case? Please, send us an email.