Cross site scripting

2012-08-1322:55:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.4%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the Better WP Security (better_wp_security) plugin before 3.2.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to “server variables,” a different vulnerability than CVE-2012-4263.

CPENameOperatorVersion
better-wp-securityle3.2.4
better-wp-securityeq- alpha3
better-wp-securityeq- alpha7
better-wp-securityeq- alpha6
better-wp-securityeq- alpha9
better-wp-securityeq- alpha5
better-wp-securityeq- alpha11
better-wp-securityeq- alpha4
better-wp-securityeq- alpha10
better-wp-securityeq- alpha1

Name	Operator	Version
better-wp-security	le	3.2.4
better-wp-security	eq	- alpha3
better-wp-security	eq	- alpha7
better-wp-security	eq	- alpha6
better-wp-security	eq	- alpha9
better-wp-security	eq	- alpha5
better-wp-security	eq	- alpha11
better-wp-security	eq	- alpha4
better-wp-security	eq	- alpha10
better-wp-security	eq	- alpha1