Skip to content
Sign in
4.8 Medium

CVE-2024-12800 The IP Based Login WordPress plugin before 2.4.1 does not sanitise values when importing, which could allow high…

Description

The IP Based Login WordPress plugin before 2.4.1 does not sanitise values when importing, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

Affected products and versions

Product Affected versions Fixed in
IP Based Login 2.4 earliest → < 2.4.1 2.4.1

Other CVEs of IP Based Login

The 2 CVEs of IP Based Login →
CVE-2024-13118 The IP Based Login WordPress plugin before 2.4.1 does not have CSRF checks in some places, which could allow attackers… 4.3 Medium
Track this CVE