Login by Auth0 < 4.0.0 - Multiple Vulnerabilities

2020-04-0100:00:00

wpscan.com

0.005 Low

EPSS

Percentile

77.3%

JSON

CVE-2020-5391 - CSRF controls missing for domain field CVE-2020-5392 - Stored XSS in Settings page CVE-2020-6753 - Stored XSS in multiple pages CVE-2020-7947 - CSV injection vulnerabilities CVE-2020-7948 - Insecure direct object reference

CPENameOperatorVersion
auth0lt4.0.0

CPE	Name	Operator	Version
	auth0	lt	4.0.0

References

auth0.com/docs/security/bulletins/2020-03-31_wpauth0

github.com/auth0/wp-auth0/security/advisories/GHSA-59vf-cgfw-6h6v

0.005 Low

EPSS

Percentile

77.3%

JSON

Related for WPVDB-ID:5F242792-EC6D-4809-AB42-3B1389684154