CVE-2021-24228 Patreon WordPress < 1.7.2 - Reflected XSS on Login Form

The Jetpack Scan team identified a Reflected Cross-Site Scripting in the Login Form of the Patreon WordPress plugin before 1.7.2. The WordPress login form wp-login.php is hooked by the plugin and offers to allow users to authenticate on the site using their Patreon account. Unfortunately, some of...

CVE-2021-24228

Patreon WordPress Plugin

CVE-2021-24228: Improper Neutralization of Input During Web Page Generation

The Jetpack Scan team identified a Reflected Cross-Site Scripting in the Login Form of the Patreon WordPress plugin before 1.7.2. The WordPress login form wp-login.php is hooked by the plugin and offers to allow users to authenticate on the site using their Patreon account. Unfortunately, some of...

WordPress 插件 跨站脚本漏洞

Patreon is a subscription-based crowdfunding platform and Patreon WordPress is a WordPress plugin for the platform. A cross-site scripting vulnerability exists in the login form in Patreon WordPress versions prior to 1.7.2. An attacker can exploit this vulnerability to conduct cross-site scriptin...

PT-2021-15772

Name of the Vulnerable Software and Affected Versions: Patreon WordPress plugin versions prior to 1.7.2 Description: A Reflected Cross-Site Scripting issue was identified in the Login Form of the Patreon WordPress plugin. The plugin hooks into the WordPress login form, allowing users to...

CVE-2020-23517

Cross Site Scripting XSS vulnerability in Aryanic HighMail High CMS versions 2020 and before allows remote attackers to inject arbitrary web script or HTML, via 'user' to LoginForm...

Patreon WordPress < 1.7.2 - Reflected XSS on Login Form

The Jetpack Scan team identified a Reflected Cross-Site Scripting in the Login Form of the plugin. The WordPress login form wp-login.php is hooked by the plugin and offers to allow users to authenticate on the site using their Patreon account. Unfortunately, some of the error logging logic behind...

CVE-2020-28873

Fluxbb 1.5.11 is affected by a denial of service DoS vulnerability by sending an extremely long password via the user login form. When a long password is sent, the password hashing process will result in CPU and memory exhaustion on the server...

Fluxbb 安全漏洞

FluxBB is an open source forum application. A denial of service vulnerability exists in Fluxbb 1.5.11. The vulnerability can be exploited to cause a denial of service by sending a very long password via the user login form to exhaust CPU and memory resources on the server...

PT-2021-11589

Name of the Vulnerable Software and Affected Versions: Fluxbb version 1.5.11 Description: The issue is a denial of service DoS vulnerability that can be triggered by sending an extremely long password via the user login form. This causes CPU and memory exhaustion on the server due to the password...

Open Redirection

productspluggableauthservice is vulnerable to open redirection. It does not sanitize a malicious link to the login form and login functionality in Cookie Auth Helper which when clicked is able to redirect the browser to an untrusted site...

PYSEC-2021-45

Products.PluggableAuthService is a pluggable Zope authentication and authorization framework. In Products.PluggableAuthService before version 2.6.0 there is an open redirect vulnerability. A maliciously crafted link to the login form and login functionality could redirect the browser to a differe...

CVE-2021-21337

Products.PluggableAuthService is a pluggable Zope authentication and authorization framework. In Products.PluggableAuthService before version 2.6.0 there is an open redirect vulnerability. A maliciously crafted link to the login form and login functionality could redirect the browser to a differe...

CVE-2021-21337: URL Redirection to Untrusted Site

Products.PluggableAuthService is a pluggable Zope authentication and authorization framework. In Products.PluggableAuthService before version 2.6.0 there is an open redirect vulnerability. A maliciously crafted link to the login form and login functionality could redirect the browser to a differe...

PT-2021-14431

Name of the Vulnerable Software and Affected Versions Products.PluggableAuthService versions prior to 2.6.1 Description The issue is an open redirect vulnerability, where a maliciously crafted link to the login form and login functionality could redirect the browser to a different website...

Jens Vagelpohl Products.PluggableAuthService 输入验证错误漏洞

Jens Vagelpohl Products.PluggableAuthService is an open source application by Jens Vagelpohl. The product defines a fully pluggable user folder for use on all Zope sites. A security vulnerability exists in Products.PluggableAuthService before version 2.6.0, which stems from an open redirection...

CVE-2020-28918

DualShield 5.9.8.0821 allows username enumeration on its login form. A valid username results in prompting for the password, whereas an invalid one will produce an "unknown username" error message...

CVE-2020-28918

DualShield 5.9.8.0821 allows username enumeration on its login form. A valid username results in prompting for the password, whereas an invalid one will produce an "unknown username" error message...

CVE-2020-28918

CVE-2020-28918 concerns DualShield 5.9.8.0821, where the login form exposes a username enumeration vulnerability. The behavior differentiates valid vs invalid usernames: a valid username advances to password prompt, while an invalid one returns an "unknown username" message. Across the connected ...

PT-2021-11602

Name of the Vulnerable Software and Affected Versions: DualShield version 5.9.8.0821 Description: The issue allows for username enumeration on the login form. When a valid username is entered, it prompts for the password, while an invalid username results in an "unknown username" error message...