Change WordPress Login Logo, 099fdf18-2888-4fbf-a72f-17f744bdfa92
- CVE, Research URL
- Home page URL
- Application
- Published on
- -
- Research Description
- Change WordPress Login Logo [change-login-logo] < 1.1.5 Change WordPress Login Logo < 1.1.5 - Authenticated Stored Cross-Site Scripting The height, and width fields used to update the custom logo was found to be vulnerable to stored XSS, as they did not sanitize user input properly before publishing the changes. It is triggered when a user loads the login page.
- Affected versions
-
max 1.1.5.
- Status
-
vulnerable