Lucene search
+L

6 matches found

Vulnrichment
Vulnrichment
•added 2024/12/14 4:23 a.m.•13 views

CVE-2024-11888 IDer Login for WordPress <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The IDer Login for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'iderloginbutton' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS8.4AI score0.00347EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/12/14 4:23 a.m.•28 views

CVE-2024-11888 IDer Login for WordPress <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The IDer Login for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'iderloginbutton' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS0.00347EPSS
SaveExploits0References4
CVE
CVE
•added 2024/12/14 4:23 a.m.•55 views

CVE-2024-11888

CVE-2024-11888 (IDer Login for WordPress) stores cross-site scripting in the IDer Login for WordPress plugin. The vulnerability arises from insufficient input sanitization and output escaping on attributes of the ider_login_button shortcode, enabling stored XSS when an authenticated user with con...

6.4CVSS8.4AI score0.00347EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/14 12:00 a.m.•5 views

CVE-2024-11888: Improper Neutralization of Input During Web Page Generation

The IDer Login for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'iderloginbutton' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS8.5AI score0.00347EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/14 12:00 a.m.•5 views

PT-2024-17323

Name of the Vulnerable Software and Affected Versions IDer Login for WordPress plugin versions up to, and including, 2.1 Description The IDer Login for WordPress plugin is vulnerable to Stored Cross-Site Scripting via the plugin's 'ider login button' shortcode due to insufficient input sanitizati...

6.4CVSS8.5AI score0.00347EPSS
SaveExploits0References10
Patchstack
Patchstack
•added 2024/12/13 9:03 p.m.•13 views

WordPress IDer Login for WordPress plugin <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zaim in WordPress Plugin IDer Login versions = 2.1...

6.4CVSS8.4AI score0.00347EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder