Cross site scripting

2012-05-2216:55:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.3%

JSON

Cross-site scripting (XSS) vulnerability in login-with-ajax.php in the Login With Ajax (aka login-with-ajax) plugin before 3.0.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the callback parameter in a lostpassword action to wp-login.php.

CPENameOperatorVersion
login_with_ajaxle3.0.4
login_with_ajaxeq2.1
login_with_ajaxeq2.1.1
login_with_ajaxeq2.1.2
login_with_ajaxeq2.1.3
login_with_ajaxeq2.1.4
login_with_ajaxeq2.1.5
login_with_ajaxeq2.2
login_with_ajaxeq2.21
login_with_ajaxeq3.0

Name	Operator	Version
login_with_ajax	le	3.0.4
login_with_ajax	eq	2.1
login_with_ajax	eq	2.1.1
login_with_ajax	eq	2.1.2
login_with_ajax	eq	2.1.3
login_with_ajax	eq	2.1.4
login_with_ajax	eq	2.1.5
login_with_ajax	eq	2.2
login_with_ajax	eq	2.21
login_with_ajax	eq	3.0