CVE-2013-3487

Multiple cross-site scripting XSS vulnerabilities in the security log in the BulletProof Security plugin before .49 for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified HTML header fields to 1 400.php, 2 403.php, or 3 403.php...

WordPress BulletProof Security Plugin <= 0.48.9 - Multiple XSS

Because of these vulnerabilities in the security log, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

CVE-2012-4268

Cross-site scripting XSS vulnerability in bulletproof-security/admin/options.php in the BulletProof Security plugin before .47.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the HTTPACCEPTENCODING header...

Cross site scripting

Cross-site scripting XSS vulnerability in bulletproof-security/admin/options.php in the BulletProof Security plugin before .47.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the HTTPACCEPTENCODING header...

CVE-2012-4268

CVE-2012-4268 describes a cross-site scripting (XSS) vulnerability in the BulletProof Security WordPress plugin. The flaw resides in bulletproof-security/admin/options.php and affects versions before .47.1, allowing remote attackers to inject arbitrary script/HTML via the HTTP_ACCEPT_ENCODING hea...

CVE-2012-4268

Cross-site scripting XSS vulnerability in bulletproof-security/admin/options.php in the BulletProof Security plugin before .47.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the HTTPACCEPTENCODING header...