The LoginPress | Custom Login Page Customizer WordPress plugin before 1.5.12 does not escape the redirect-page parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: WPScan
Published: 2022-03-07T08:16:26
Updated: 2024-08-02T23:25:40.244Z
Reserved: 2022-01-24T00:00:00
Link: CVE-2022-0347
Vulnrichment
No data.
NVD
Status : Modified
Published: 2022-03-07T09:15:09.097
Modified: 2024-11-21T06:38:25.760
Link: CVE-2022-0347
Redhat
No data.