CVE:CVE-2013-3487
CNNVD:CNNVD-201308-023
WordPress是WordPress软件基金会的一套使用PHP语言开发的博客平台，该平台支持在PHP和MySQL的服务器上架设个人博客网站。BulletProof Security是其中的一款防暴力破解的安全插件。
WordPress BulletProof Security插件.48.9及之前版本的安全日志存在跨站脚本漏洞。远程攻击者可通过提交多个HTTP header字段到400.php、403.php或403.php脚本利用该漏洞注入任意Web脚本或HTML。
solution:Upgrade ait-pro bulletproof-security to a higher version than .48.9,.45.4,.45.5,.45.6,.45.7,.45.8,.45.9,.46,.46.1,.46.2,.46.3,.46.4,.46.5,.46.6,.46.7,.46.8,.46.9,.47,.47.1,.47.2,.47.3,.47.4,.47.5,.47.6,.47.7,.47.8,.47.9,.48,.48.1,.48.2,.48.3,.48.4,.48.5,.48.6,.48.7,.48.8,and avoid the version (,.48.9],.45.4,.45.5,.45.6,.45.7,.45.8,.45.9,.46,.46.1,.46.2,.46.3,.46.4,.46.5,.46.6,.46.7,.46.8,.46.9,.47,.47.1,.47.2,.47.3,.47.4,.47.5,.47.6,.47.7,.47.8,.47.9,.48,.48.1,.48.2,.48.3,.48.4,.48.5,.48.6,.48.7,.48.8