The Erident Custom Login and Dashboard WordPress plugin before 3.5.9 did not properly sanitise its settings, allowing high privilege users to use XSS payloads in them (even when the unfileted_html is...
4.8CVSS
4.8AI Score
0.001EPSS
8.8CVSS
8.7AI Score
0.001EPSS