CVE-2012-4264

Multiple cross-site scripting XSS vulnerabilities in the Better WP Security betterwpsecurity plugin before 3.2.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "server variables," a different vulnerability than CVE-2012-4263...

Cross site scripting

Cross-site scripting XSS vulnerability in inc/admin/content.php in the Better WP Security betterwpsecurity plugin before 3.2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the HTTPUSERAGENT header...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Better WP Security betterwpsecurity plugin before 3.2.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "server variables," a different vulnerability than CVE-2012-4263...

CVE-2012-4263

The CVE-2012-4263/XSS issue affects the WordPress plugin Better WP Security (better_wp_security) prior to version 3.2.5, where an XSS can be triggered by entering arbitrary script/HTML via the HTTP_USER_AGENT header in inc/admin/content.php. A related vulnerability, CVE-2012-4264, involves multip...

CVE-2012-4263

Cross-site scripting XSS vulnerability in inc/admin/content.php in the Better WP Security betterwpsecurity plugin before 3.2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the HTTPUSERAGENT header...

CVE-2012-4264

Multiple cross-site scripting XSS vulnerabilities in the Better WP Security betterwpsecurity plugin before 3.2.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "server variables," a different vulnerability than CVE-2012-4263...

CVE-2012-4264

The CVE-2012-4264 entry applies to the WordPress plugin Better WP Security (better_wp_security) prior to version 3.2.5. The vulnerability arises from improper sanitization of data in server variables (and related vectors), allowing remote attackers to inject arbitrary web script or HTML (XSS). Af...

PT-2012-5291

Name of the Vulnerable Software and Affected Versions Better WP Security plugin versions prior to 3.2.5 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the HTTP USER AGENT header. Recommendations For versions prior to 3.2.5...

WordPress Better WP Security Plugin <= 3.2.4 - XSS

Because of this vulnerability in inc/admin/content.php, the attackers can inject arbitrary web script or HTML via the HTTPUSERAGENT header. Solution Update the plugin...

PT-2012-5292

Name of the Vulnerable Software and Affected Versions Better WP Security plugin versions prior to 3.2.5 Description The issue is related to multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via unspecified vector...

CVE-2012-4263: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in inc/admin/content.php in the Better WP Security betterwpsecurity plugin before 3.2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the HTTPUSERAGENT header...

CVE-2012-4264: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Better WP Security betterwpsecurity plugin before 3.2.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "server variables," a different vulnerability than CVE-2012-4263...