XSS Threat Detected

  • loveofvi

    (@loveofvi)


    4 weeks ago

    On the Home page, [ redundant link deleted ], this warning pops up:

    Page Blocked
    This post contains content that may execute malicious JavaScript in your browser. The page has been blocked to protect your session. Review the detected payloads below. If you understand the risks, click View Page to load the content. Otherwise, edit the post to remove the malicious code.
    Detected payloads: iframe

    On the About Us page, /about/,  same warning pops up except Detected payloads: script

    I haven’t made any changes to either page involving embedded scripts or iframes, and can’t find any issues. Pages display fine online. Also, I am an amateur and don’t understand tech-talk, so simple language, please.

    The page I need help with: [log in to see the link]

Viewing 3 replies - 1 through 3 (of 3 total)
  • Moderator threadi

    (@threadi)

    4 weeks ago

    I don’t see any such message when I visit the website. So I’m not sure where it’s coming from on your end. It could be coming from your browser, a browser add-on, or security software on your computer.

    Can you show me a screenshot of the message? See: https://wordpress.org/support/forum-user-guide/block-editor/#adding-screenshots

    And very importantly: is this your website? Or just one you’re visiting? If it’s the latter, I’d recommend contacting the website operator about it.

    Thread Starter loveofvi

    (@loveofvi)

    4 weeks ago

    Hi, sorry I wasn’t more clear. The errors occur when I try to open/edit the page from the WP Dashboard. Yes, this is the site I volunteer to manage for the non-profit.

    Moderator threadi

    (@threadi)

    4 weeks ago

    In that case, I’d be especially interested in seeing a screenshot. Because the message isn’t coming from WordPress.

Viewing 3 replies - 1 through 3 (of 3 total)

You must be logged in to reply to this topic.

Tags