Security Advisory

CVE-2022-1029

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-06-27 08:56:11

Last updated 2024-08-02 23:47:43

Assigner WPScan

State PUBLISHED

Description

The Limit Login Attempts WordPress plugin before 4.0.72 does not sanitise and escape some of its settings, leading to malicious users with administrator privileges to store malicious Javascript code leading to Cross-Site Scripting attacks when unfiltered_html is disallowed (for example in multisite setup)

← Browse all CVEs View on cve.org ↗