Non notée
CVE-2022-0347 The LoginPress | Custom Login Page Customizer WordPress plugin before 1.5.12 does not escape the redirect-page parameter…
Description
The LoginPress | Custom Login Page Customizer WordPress plugin before 1.5.12 does not escape the redirect-page parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| LoginPress | Custom Login Page Customizer 1.5 | premières → < 1.5.12 | 1.5.12 |