CVE-2021-24658
Assigner: WPScan
Published: 2021-08-23T11:10:20
State: PUBLISHED
affected: product: Erident Custom Login and Dashboard
vendor: Libin V Babu
versions: lessThan: 3.5.9
status: affected
version: 3.5.9
versionType: custom
credits: value: James Calver (Bulletproof Cyber)
descriptions: value: The Erident Custom Login and Dashboard WordPress plugin before 3.5.9 did not properly sanitise its settings, allowing high privilege users to use XSS payloads in them (even when the unfileted_html is disabled)
problemTypes: descriptions: cweId: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
type: CWE
source: discovery: UNKNOWN
title: Erident Custom Login and Dashboard < 3.5.9 - Authenticated Stored Cross-Site Scripting (XSS)
x_generator: WPScan CVE Generator