QwikSec

Security Database

CVE

CWE

Training

CVE-2021-24214

Published: May 5, 2021

Modified: Aug 3, 2024

PUBLISHED

Description

The OpenID Connect Generic Client WordPress plugin 3.8.0 and 3.8.1 did not sanitise the login error when output back in the login form, leading to a reflected Cross-Site Scripting issue. This issue does not require authentication and can be exploited with the default configuration.

Vendor	Product	Versions
daggerhart	OpenID Connect Generic Client	affected `3.8.0 - < 3.8.0*` affected `3.8.2 - < 3.8.2`

Weaknesses (CWE)

References

https://wpscan.com/vulnerability/31cf0dfb-4025-4898-a5f4-fc7115565a10

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.