Beveiligingsadvies

CVE-2023-4549

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-09-25 15:56:56
Laatst bijgewerkt 2024-08-02 07:31:05
Toegewezen door WPScan
CVSS-score geen score
Status PUBLISHED

Beschrijving

The DoLogin Security WordPress plugin before 3.7 does not properly sanitize IP addresses coming from the X-Forwarded-For header, which can be used by attackers to conduct Stored XSS attacks via WordPress' login form.