CVE-2012-4268

Cross-site scripting XSS vulnerability in bulletproof-security/admin/options.php in the BulletProof Security plugin before .47.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the HTTPACCEPTENCODING header...

Cross site scripting

Cross-site scripting XSS vulnerability in bulletproof-security/admin/options.php in the BulletProof Security plugin before .47.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the HTTPACCEPTENCODING header...

CVE-2012-4268

CVE-2012-4268 describes a cross-site scripting (XSS) vulnerability in the BulletProof Security WordPress plugin. The flaw resides in bulletproof-security/admin/options.php and affects versions before .47.1, allowing remote attackers to inject arbitrary script/HTML via the HTTP_ACCEPT_ENCODING hea...

WordPress BulletProof Security Plugin <= .47.0 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the HTTPACCEPTENCODING header. Solution Update the plugin...