A5 Custom Login Page - Reflected XSS

A5 Custom Login Page WordPress plugin v2.8.1 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires a crafted URL or...

CVE-2024-13226

The A5 Custom Login Page WordPress plugin through 2.8.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13226

creationtimestamp| type| source ---|---|--- 2025-01-31 06:16:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzdxqlkc62f 2025-01-31 06:49:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113921632200573899 2025-01-31 07:24:07+00:00| seen|...

CVE-2024-13226

The A5 Custom Login Page WordPress plugin through 2.8.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13226 A5 Custom Login Page <= 2.8.1 - Reflected XSS

The A5 Custom Login Page WordPress plugin through 2.8.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13226

CVE-2024-13226 affects the A5 Custom Login Page WordPress plugin (versions up to 2.8.1). The vulnerability is a reflected cross-site scripting (XSS) caused by insufficient sanitization/escaping of a parameter before it is echoed in the login page. Impact: potential execution of scripts in the con...