CVE-2013-3487 Information

Description

Multiple cross-site scripting (XSS) vulnerabilities in the security log in the BulletProof Security plugin before .49 for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified HTML header fields to (1) 400.php (2) 403.php or (3) 403.php.

Reference

http://osvdb.org/95928 http://osvdb.org/95929 http://osvdb.org/95930 http://secunia.com/advisories/53614 http://wordpress.org/plugins/bulletproof-security/changelog http://www.securityfocus.com/bid/61583 https://exchange.xforce.ibmcloud.com/vulnerabilities/86160