WordPress Login Screen Manager Plugin <= 3.5.2 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-47182

8.8HIGH

Key Information:

Vendor

WordPress
Status
Login Screen Manager
Vendor
CVE Published:
6 November 2023

What is CVE-2023-47182?

A critical security flaw has been identified in the Login Screen Manager plugin by Nazmul Hossain Nihal that allows an attacker to exploit a Cross-Site Request Forgery (CSRF) attack to execute stored Cross-Site Scripting (XSS) attacks. This vulnerability affects versions of the plugin prior to 3.5.2, posing significant risks to WordPress sites that implement this plugin. Successful exploitation could enable an attacker to manipulate user sessions and potentially compromise sensitive information.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Login Screen Manager <= 3.5.2

References

https://patchstack.com/database/vulnerability/login-scree...
vdb-entry

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nano (Patchstack Alliance)
JSON
.