Unscored CVE-2014-7958 EUVD-2014-7808GHSA-cx3j-j3m2-q9vw

Cross-site scripting (XSS) vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPress allo…

Published Nov 6, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the dbhost parameter.

References

http://packetstormsecurity.com/files/128977/WordPress-Bulletproof-Security-.51-XSS-SQL-Injection-SSRF.html
20141105 Wordpress bulletproof-security <=.51 multiple vulnerabilities mailing-list
https://wordpress.org/plugins/bulletproof-security/changelog/
70916 vdb-entry