CVE-2021-24658
23.08.2021, 12:15
The Erident Custom Login and Dashboard WordPress plugin before 3.5.9 did not properly sanitise its settings, allowing high privilege users to use XSS payloads in them (even when the unfileted_html is disabled)
| Vendor | Product | Version |
|---|---|---|
| erident_custom_login_and_dashboard_project | erident_custom_login_and_dashboard | 𝑥 < 3.5.9 |
𝑥
= Vulnerable software versions