Vulnerabilities

TI-2023-17019 CVE-2023-34175 · GHSA-r98x-6qxq-33f4

WordPress Login Configurator Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in GrandSlambert Login Configurator plugin <= 2.1 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00374 Published 2023-08-30 No fix listed CWE-79

TI-2023-17200 CVE-2023-34369 · GHSA-g4g3-7r7c-g8wq

WordPress Login Configurator Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in GrandSlambert Login Configurator plugin <= 2.1 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-07-25 No fix listed CWE-79

TI-2023-01779 CVE-2023-1893 · GHSA-h99w-rr86-xx23

Login Configurator <= 2.1 - Reflected Cross-Site Scripting

MEDIUM 60

The Login Configurator WordPress plugin through 2.1 does not properly escape a URL parameter before outputting it to the page, leading to a reflected cross-site scripting vulnerability targeting site administrators.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00718 Published 2023-07-17 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Login Configurator Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)

WordPress Login Configurator Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)

Login Configurator <= 2.1 - Reflected Cross-Site Scripting