The classifier judged this item not relevant to AI security, so it is left out of lists, feeds, the API and dataset releases. If that is wrong, report a correction on this page.
InfoResearchPeer-reviewed
PSSA: A Precise Static Analysis Framework for Detecting Vulnerabilities in CMS Plugins
- Published
- Record updated
Summary
Researchers present PSSA, a static analysis framework that detects web vulnerabilities in PHP-based CMS plugins by modeling the CMS framework's context and object-oriented PHP code. Compared with existing tools on established vulnerability datasets, PSSA detects the most vulnerabilities while minimizing false positives. Applied to 980 popular WordPress plugins, it found 178 new vulnerabilities, 124 of them in plugins with over 1 million downloads, and contributed to 82 CVE identifiers being acknowledged.