Lucene search
WPScanCVELIST:CVE-2023-1861HistoryMay 02, 2023 - 7:04 a.m.
CVE-2023-1861 Limit Login Attempts < 1.7.2 - Subscriber+ Stored XSS
2023-05-0207:04:50
WPScan
www.cve.org
4
cve-2023-1861
limit login attempts
wordpress
stored xss
security vulnerability
sanitize
EPSS
0.001
Percentile
23.5%
The Limit Login Attempts WordPress plugin through 1.7.2 does not sanitize and escape usernames when outputting them back in the logs dashboard, which could allow any authenticated users, such as subscriber to perform Stored Cross-Site Scripting attacks
CNA Affected
[
{
"vendor": "Unknown",
"product": "Limit Login Attempts",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThanOrEqual": "1.7.2"
}
],
"defaultStatus": "affected",
"collectionURL": "https://wordpress.org/plugins"
}
]Related
cve
cve
CVE-2023-1861
2023-05-02 08:15:10
nvd
nvd
CVE-2023-1861
2023-05-02 08:15:10
wpexploit
wpexploit
Limit Login Attempts < 1.7.2 - Subscriber+ Stored XSS
2023-04-10 00:00:00
wpvulndb
wpvulndb
Limit Login Attempts < 1.7.2 - Subscriber+ Stored XSS
2023-04-10 00:00:00
prion
prion
Cross site scripting
2023-05-02 08:15:00
wordfence
wordfence