CVE-2026-94175 Unauthenticated Cross Site Scripting (XSS) in All In One Login <= 2.4.1 versions

Description

Unauthenticated Cross Site Scripting (XSS) in All In One Login <= 2.4.1 versions.

Affected products and versions

Product	Affected versions	Fixed in
All In One Login 2.4	earliest → 2.4.1	No fix stated

Other CVEs of All In One Login

The 2 CVEs of All In One Login →

CVE-2025-58595 Authentication Bypass by Spoofing vulnerability in Saad Iqbal All In One Login change-wp-admin-login allows Identity… 5.3 Medium