2 matches found
CVE-2023-34172
CVE-2023-34172 describes an authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in the WordPress plugin WordPress Social Login (Miled WordPress Social Login) up to version ≤ 3.0.4. Root cause: stored XSS likely via admin-accessible vector in the plugin. Impact: local XSS could ...
CVE-2023-34023
CVE-2023-34023: Unauth. Reflected Cross-Site Scripting (XSS) in Miled WordPress Social Login plugin, affected versions