CVE-2017-20056CWE-80
weblizar User Login Log Plugin Stored cross site scriting
Low · published June 16, 2022
What it is
A vulnerability was found in weblizar User Login Log Plugin 2.2.1. It has been classified as problematic. Affected is an unknown function. The manipulation leads to basic cross site scripting (Stored). It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
The record
Technical detail
- CVSS v3.1
- 3.5 · LOW
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00827 · 57.0th percentile
- Weakness
- CWE-80 · Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
- Published
- 2022-06-16T12:20Z
EPSS history
Timeline