← voltar
CVE-2021-24658

Erident Custom Login and Dashboard < 3.5.9 - Authenticated Stored Cross-Site Scripting (XSS)

EPSS 0.7%CWE-79
The Erident Custom Login and Dashboard WordPress plugin before 3.5.9 did not properly sanitise its settings, allowing high privilege users to use XSS payloads in them (even when the unfileted_html is disabled)

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →