TI-2017-14164 CVE-2017-20098 · GHSA-mw4r-9p2v-x35c
Admin Custom Login Plugin Persistent cross site scripting
Priority MEDIUM 55
A vulnerability was found in Admin Custom Login Plugin 2.4.5.2.
No Weblizar vulnerabilities are listed in CISA KEV.
2 records in Admin Custom Login · all components
A vulnerability was found in Admin Custom Login Plugin 2.4.5.2.
The Admin Custom Login WordPress plugin is vulnerable to Cross-Site Request Forgery due to the loginbgSave action found in the ~/includes/Login-form-setting/Login-form-background.php file which allows attackers to inject…