PT-2023-16350 · WordPress · Wp Login Box

Lana Codes · Published 2023-05-08 · Updated 2023-05-12 · CVE-2023-0544

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions WP Login Box WordPress plugin versions prior to 2.0.3

Description The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This can occur even when the unfiltered html capability is disallowed, for example, in a multisite setup.

Recommendations For WP Login Box WordPress plugin versions prior to 2.0.3, update to version 2.0.3 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2023-0544

Affected Products

Wp Login Box

References · 3

• 🔥 https://wpscan.com/vulnerability/8ef9585f-67d7-4651-977a-fcad113882bd · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-0544 · Security Note
• https://osv.dev/vulnerability/CVE-2023-0544 · Vendor Advisory