CVE-2017-20098CWE-80

Admin Custom Login Plugin Persistent cross site scripting

Low · published June 27, 2022

CVSS v3.1
3.5
EPSS
1%
Percentile
44.1
In the wild
Unconfirmed
What it is

A vulnerability was found in Admin Custom Login Plugin 2.4.5.2. It has been classified as problematic. Affected is an unknown function. The manipulation leads to basic cross site scripting (Persistent). It is possible to launch the attack remotely.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00531 · 44.1th percentile
Weakness
CWE-80 · Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Published
2022-06-27T18:11Z
EPSS history
Timeline
  • 27 JUN 18:11Z
    Admin Custom Login Plugin Persistent cross site scripting
    cvelistv5