CVE-2012-4263

The CVE-2012-4263/XSS issue affects the WordPress plugin Better WP Security (better_wp_security) prior to version 3.2.5, where an XSS can be triggered by entering arbitrary script/HTML via the HTTP_USER_AGENT header in inc/admin/content.php. A related vulnerability, CVE-2012-4264, involves multip...

WordPress Better WP Security Plugin <= 3.2.4 - XSS

Because of this vulnerability in inc/admin/content.php, the attackers can inject arbitrary web script or HTML via the HTTPUSERAGENT header. Solution Update the plugin...