':return: True if we can use the XSS vulnerabilities in the KB to
exploit the RFI vulnerability.'

def _verify_xss_vuln(self):

    xss_vulns = kb.kb.get('xss', 'xss')
    if (not xss_vulns):
        msg = 'rfi    plugin    is    configured    to    use    a    XSS    bug    to    exploit    the    RFI    bug,    but    no    XSS    was    found.    The    exploit    will    use    a    local    web    server.'
        om.out.console(msg)
    test_string = '<?#@!()&=?>'
    for xss_vuln in xss_vulns:
        if (xss_vuln.get_mutant().get_method() != 'GET'):
            continue
        xss_mutant = xss_vuln.get_mutant()
        xss_mutant = xss_mutant.copy()
        xss_mutant.set_token_value(test_string)
        try:
            http_res = self._uri_opener.send_mutant(xss_mutant)
        except:
            continue
        else:
            if (test_string in http_res.get_body()):
                self._xss_vuln = xss_vuln
                return True
    if (not self._xss_vuln):
        msg = 'rfi    plugin    is    configured    to    use    a    XSS    vulnerability    to    exploit    the    RFI,    but    no    XSS    with    the    required    capabilities    was    found.    The    exploit    will    use    a    local    web    server.'
        om.out.console(msg)
    return False
