CVE-2013-3487

Currently unrated

Key Information:

Vendor
Wordpress
Status
Bulletproof-security
Vendor
CVE Published:
3 March 2014

Summary

Multiple cross-site scripting (XSS) vulnerabilities in the security log in the BulletProof Security plugin before .49 for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified HTML header fields to (1) 400.php, (2) 403.php, or (3) 403.php.

References

http://secunia.com/advisories/53614
third-party-advisoryx_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilities/86160
vdb-entryx_refsource_XF
http://www.securityfocus.com/bid/61583
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.