Vulnerabilities (CVE)

Filtered by vendor Apasionados Subscribe
Filtered by product Customize Login Image
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-33851 1 Apasionados 1 Customize Login Image 2024-02-28 3.5 LOW 5.4 MEDIUM
A cross-site scripting (XSS) attack can cause arbitrary code (JavaScript) to run in a user's browser and can use an application as the vehicle for the attack. The XSS payload given in the "Custom logo link" executes whenever the user opens the Settings Page of the "Customize Login Image" Plugin.