OpenID Connect Generic Client 3.8.0-3.8.1 - Reflected Cross Site Scripting (XSS) via Login Error

🗓️ 07 Apr 2021 00:00:00Reported by Austin BentleyType

OpenID Connect Generic Client version 3.8.0-3.8.1 has a reflected Cross Site Scripting (XSS) vulnerability via Login Error. The issue can be exploited without authentication

Reporter	Title	Published	Views	Family All 7
wpexploit	OpenID Connect Generic Client 3.8.0-3.8.1 - Reflected Cross Site Scripting (XSS) via Login Error	7 Apr 202100:00	–	wpexploit
CVE	CVE-2021-24214	6 May 202113:15	–	cve
Prion	Cross site scripting	6 May 202113:15	–	prion
NVD	CVE-2021-24214	6 May 202113:15	–	nvd
Cvelist	CVE-2021-24214 OpenID Connect Generic Client 3.8.0-3.8.1 - Reflected Cross Site Scripting (XSS) via Login Error	5 May 202118:39	–	cvelist
Nuclei	WordPress OpenID Connect Generic Client 3.8.0-3.8.1 - Cross-Site Scripting	15 Sep 202218:21	–	nuclei
Patchstack	WordPress OpenID Connect Generic Client plugin <= 3.8.1 - Reflected Cross-Site Scripting (XSS) vulnerability	7 Apr 202100:00	–	patchstack

Vulners

Node

daggerhartlab openid_connect_generic_clientRange<3.8.2wordpress

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/2502620/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

07 Apr 2021 00:00Current

0.5Low risk

Vulners AI Score0.5

EPSS0.004