Vulnerability Details CVE-2023-1893
The Login Configurator WordPress plugin through 2.1 does not properly escape a URL parameter before outputting it to the page, leading to a reflected cross-site scripting vulnerability targeting site administrators.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.018
EPSS Ranking 82.5%
CVSS Severity
CVSS v3 Score 6.1
References
- http://packetstormsecurity.com/files/173723/WordPress-Login-Configurator-2.1-Cross-Site-Scripting.html
- https://wpscan.com/vulnerability/dbe6cf09-971f-42e9-b744-9339454168c7
- http://packetstormsecurity.com/files/173723/WordPress-Login-Configurator-2.1-Cross-Site-Scripting.html
- https://wpscan.com/vulnerability/dbe6cf09-971f-42e9-b744-9339454168c7
Products affected by CVE-2023-1893
-
cpe:2.3:a:login_configurator_project:login_configurator:2.1