Login Configurator Project: Security Vulnerabilities
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in GrandSlambert Login Configurator plugin <= 2.1 versions.
CVSS Score
7.1
EPSS Score
0.001
Published
2023-08-30
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in GrandSlambert Login Configurator plugin <= 2.1 versions.
CVSS Score
5.9
EPSS Score
0.001
Published
2023-07-25
The Login Configurator WordPress plugin through 2.1 does not properly escape a URL parameter before outputting it to the page, leading to a reflected cross-site scripting vulnerability targeting site administrators.
CVSS Score
6.1
EPSS Score
0.001
Published
2023-07-17