TI-2017-11614 CVE-2017-15867 · GHSA-jrm2-6mfg-m96pMultiple cross-site scripting (XSS) vulnerabilities in the user-login-history plugin…Priority LOW 29Multiple cross-site scripting (XSS) vulnerabilities in the user-login-history plugin through 1.5.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) date_from, (2) date_to, (3) user_…CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01041 · Published 2017-10-24 · No fix listed CWE-79
