2 matches found
CVE-2013-3487: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the security log in the BulletProof Security plugin before .49 for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified HTML header fields to 1 400.php, 2 403.php, or 3 403.php...
4.3CVSS5.9AI score0.02289EPSS
SaveExploits0References2
PT-2014-2685
Name of the Vulnerable Software and Affected Versions BulletProof Security plugin versions prior to .49 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the security log of the BulletProof Security plugin for WordPress. These vulnerabilities allow remote attacke...
4.3CVSS0.02289EPSS
SaveExploits0References9
20