CVE-2015-9230 BulletProof Security < .52.5 - Cross-Site Scripting
MediumCVSS 4.8
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In the admin/db-backup-security/db-backup-security.php page in the BulletProof Security plugin before .52.5 for WordPress, XSS is possible for remote authenticated administrators via the DBTablePrefix parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wordpress bulletproof-security(WordPress) | < .52.5 | .52.5 |
| ait-pro bulletproof security | = .52.4 | No fix listed |
References
- Wordfence Intelligence third-party-advisory
- www.cve.org
- www.openwall.com exploit mailing-list third-party-advisory
- cxsecurity.com exploit third-party-advisory
- cybersecurityworks.com exploit third-party-advisory
- forum.ait-pro.com third-party-advisory
- github.com exploit third-party-advisory
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- wpvulndb.com third-party-advisory