CVE-2024-32674

Heateor Social Login WordPress prior to 1.1.32 contains a cross-site scripting vulnerability

Medium · published May 8, 2024

CVSS v3.1
5.4
EPSS
0%
Percentile
26.4
In the wild
Unconfirmed
What it is

Heateor Social Login WordPress prior to 1.1.32 contains a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00341 · 26.4th percentile
Published
2024-05-08T03:37Z
EPSS history
Timeline
  • 08 MAY 03:37Z
    Heateor Social Login WordPress prior to 1.1.32 contains a cross-site scripting vulnerability
    cvelistv5