Support » Plugin: Wordfence Security - Firewall & Malware Scan » Wordfence Alert email has strange youtube video embedded

  • Resolved jedimoff

    (@jedimoff)


    We are using the free version of WordFence and scanning of the website is clean.

    But the alert email that wordfence sends has this video embedded at the bottom of the email

    Blocked for XSS: Cross Site Scripting in POST body: comments=<a href="http://www.youtube.com/watch?v=pqOx7zWd8qE">Квартира в Красной Поляне<

    Any Ideas?

    Thanks

    Jeremy

    • This topic was modified 1 year, 9 months ago by .
Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Support wfscott

    (@wfscott)

    Hi @jedimoff,

    Could you please send me an email with a screenshot of the full email you received to scottm [at] wordfence [dot] com

    I’ll check it over for you and see how to proceed.

    -Scott

    Scott,

    I think I figured it out. I believe gmail was embedding the video via taking the link in the blocked attacks section and automatically displaying the video at the bottom of the email.

    I did send you a screenshot to review.

    Thanks

    Jeremy

    Plugin Support wfscott

    (@wfscott)

    @jedimoff,

    That was indeed an alert of what was blocked in the attempted attack. Glad you got it figured out!

    Thanks

    Jeremy

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Wordfence Alert email has strange youtube video embedded’ is closed to new replies.