3 matches found
CVE-2021-36823
CVE-2021-36823 affects the WordPress plugin AGCA – Absolutely Glamorous Custom Admin (version
CVE-2024-2907
The Absolutely Glamorous Custom Admin (AGCA) WordPress plugin versions prior to 7.2.2 is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the insufficient sanitization and escaping of certain plugin settings, which allows high-privilege users, such as administrators, to perform...
CVE-2021-24944
The CVE-2021-24944 entry concerns the WordPress plugin “Custom Dashboard & Login Page” (pre-7.0). The connected sources indicate a preventable Stored Cross‑Site Scripting (XSS) vulnerability caused by insufficient sanitisation of certain admin/settings fields, enabling high‑privilege users to exe...