Lucene search

Login Configurator Security Vulnerabilities

cve

CVE-2023-1893

The Login Configurator WordPress plugin through 2.1 does not properly escape a URL parameter before outputting it to the page, leading to a reflected cross-site scripting vulnerability targeting site administrators.

6.1CVSS

6.1AI Score

0.001EPSS

2023-07-17 02:15 PM

cve

CVE-2023-34175

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in GrandSlambert Login Configurator plugin <= 2.1 versions.

7.1CVSS

6AI Score

0.001EPSS

2023-08-30 02:15 PM

cve

CVE-2023-34369

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in GrandSlambert Login Configurator plugin <= 2.1 versions.

5.9CVSS

4.8AI Score

0.001EPSS

2023-07-25 02:15 PM