Lucene search
WpvulndbWPEX-ID:6D30DA09-DF37-49BE-BB46-0E0FEC90850FHistoryDec 14, 2020 - 12:00 a.m.
Limit Login Attempts Reloaded < 2.16.0 - Authenticated Reflected Cross-Site Scripting
2020-12-1400:00:00
wpvulndb
63
security exploit
login attempts
cross-site scripting
wordpress plugin
EPSS
0.001
Percentile
21.4%
The plugin does not properly sanitise user input in its options page, which could allow attackers to perform XSS attacks against logged in administrator by making them open a malicious URL The issue was partially fixed in 2.15.1, and fully remediated in 2.16.0
https://example.com/wp-admin/options-general.php?page=limit-login-attempts&tab=d7raf%22%3E%3Cscript%3Ealert(1)%3C/script%3ERelated
cvelist
cvelist
CVE-2020-35589
2020-12-21 06:03:41
prion
prion
Code injection
2020-12-21 07:15:00
wpvulndb
wpvulndb
cve
cve
CVE-2020-35589
2020-12-21 07:15:13
nvd
nvd
CVE-2020-35589
2020-12-21 07:15:13
openvas
openvas