CVE:CVE-2012-4264
CNNVD:CNNVD-201208-172
WordPress是WordPress软件基金会的一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。
WordPress中的Better WP Security(better_wp_security)插件3.2.5之前版本中存在多个跨站脚本(XSS)漏洞。远程攻击者可利用这些漏洞通过与‘服务变量’相关的未明向量注入任意web脚本或HTML。
solution:Upgrade bit51 better-wp-security to a higher version than 3.2.4,-:alpha1,-:alpha10,-:alpha11,-:alpha2,-:alpha3,-:alpha4,-:alpha5,-:alpha6,-:alpha7,-:alpha8,-:alpha9,0.1:alpha,0.1:beta,0.2:beta,0.3:beta,0.4:beta,0.5:beta,0.6:beta,0.7:beta,0.8:beta,0.9:beta,0.10:beta,0.11:beta,0.13:beta,0.14:beta,0.15:beta,0.16:beta,1.0,1.1,1.2,1.3,1.4,1.5,1.6,1.7,1.8,1.8.1,1.9,2.0,2.1,2.2,2.3,2.4,2.5,2.6,2.7,2.8,2.9,2.10,2.11,2.12,2.13,2.14,2.15,2.16,2.17,2.18,3.0,3.0.1,3.0.2,3.0.3,3.0.4,3.0.5,3.0.6,3.0.7,3.0.8,3.0.9,3.0.10,3.0.11,3.0.12,3.1,3.2,3.2.1,3.2.2,3.2.3,3.2.5,and avoid the version (,3.2.4],-:alpha1,-:alpha10,-:alpha11,-:alpha2,-:alpha3,-:alpha4,-:alpha5,-:alpha6,-:alpha7,-:alpha8,-:alpha9,0.1:alpha,0.1:beta,0.2:beta,0.3:beta,0.4:beta,0.5:beta,0.6:beta,0.7:beta,0.8:beta,0.9:beta,0.10:beta,0.11:beta,0.13:beta,0.14:beta,0.15:beta,0.16:beta,1.0,1.1,1.2,1.3,1.4,1.5,1.6,1.7,1.8,1.8.1,1.9,2.0,2.1,2.2,2.3,2.4,2.5,2.6,2.7,2.8,2.9,2.10,2.11,2.12,2.13,2.14,2.15,2.16,2.17,2.18,3.0,3.0.1,3.0.2,3.0.3,3.0.4,3.0.5,3.0.6,3.0.7,3.0.8,3.0.9,3.0.10,3.0.11,3.0.12,3.1,3.2,3.2.1,3.2.2,3.2.3,3.2.5