Back to search
CVE-2021-24657
Published: Sep 20, 2021
Modified: Aug 3, 2024
PUBLISHED
Description
The Limit Login Attempts WordPress plugin before 4.0.50 does not escape the IP addresses (which can be controlled by attacker via headers such as X-Forwarded-For) of attempted logins before outputting them in the reports table, leading to an Unauthenticated Stored Cross-Site Scripting issue.
| Vendor | Product | Versions |
|---|---|---|
Unknown | Limit Login Attempts | affected 4.0.50 - < 4.0.50 |
Weaknesses (CWE)
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now