CVE-2021-24939

The LoginWP Formerly Peter's Login Redirect WordPress plugin before 3.0.0.5 does not sanitise and escape the rulloginurl and rullogouturl parameter before outputting them back in attributes in an admin page, leading to a Reflected Cross-Site Scripting issue...

CVE-2021-24939

The LoginWP Formerly Peter's Login Redirect WordPress plugin before 3.0.0.5 does not sanitise and escape the rulloginurl and rullogouturl parameter before outputting them back in attributes in an admin page, leading to a Reflected Cross-Site Scripting issue...

PT-2021-16377

Name of the Vulnerable Software and Affected Versions: LoginWP Formerly Peter's Login Redirect versions prior to 3.0.0.5 Description: The issue arises from the plugin's failure to sanitise and escape the rul login url and rul logout url parameters before outputting them back in attributes in an...