CVE-2023-1861

The Limit Login Attempts WordPress plugin through 1.7.2 does not sanitize and escape usernames when outputting them back in the logs dashboard, which could allow any authenticated users, such as subscriber to perform Stored Cross-Site Scripting attacks

Score
CVSS 3.1 5.4 Medium
Status
Modified - contact@wpscan.com
Published
2023-05-02
Last modified
2025-01-30
Weaknesses
CWE-79

Affected products

References

 
 
© AVABIS GmbH privacypolicy about