Lucene search
WPScanCVELIST:CVE-2021-24657HistorySep 20, 2021 - 10:06 a.m.
CVE-2021-24657 Limit Login Attempts < 4.0.50 - Unauthenticated Stored Cross-Site Scripting
2021-09-2010:06:48
CWE-79
WPScan
www.cve.org
3
cve-2021-24657
wordpress
plugin
ip addresses
unauthenticated stored cross-site scripting
EPSS
0.002
Percentile
53.3%
The Limit Login Attempts WordPress plugin before 4.0.50 does not escape the IP addresses (which can be controlled by attacker via headers such as X-Forwarded-For) of attempted logins before outputting them in the reports table, leading to an Unauthenticated Stored Cross-Site Scripting issue.
CNA Affected
[
{
"product": "Limit Login Attempts",
"vendor": "Unknown",
"versions": [
{
"lessThan": "4.0.50",
"status": "affected",
"version": "4.0.50",
"versionType": "custom"
}
]
}
]Related
wpvulndb
wpvulndb
Limit Login Attempts < 4.0.50 - Unauthenticated Stored Cross-Site Scripting
2021-08-23 00:00:00
nvd
nvd
CVE-2021-24657
2021-09-20 10:15:09
wpexploit
wpexploit
Limit Login Attempts < 4.0.50 - Unauthenticated Stored Cross-Site Scripting
2021-08-23 00:00:00
prion
prion
Cross site scripting
2021-09-20 10:15:00
cve
cve
CVE-2021-24657
2021-09-20 10:15:09