Files
CVEs-PoC/2018/CVE-2018-11366.md
T
2025-09-29 21:09:30 +02:00

703 B

CVE-2018-11366

Description

init.php in the Loginizer plugin 1.3.8 through 1.3.9 for WordPress has Unauthenticated Stored Cross-Site Scripting (XSS) because logging is mishandled. This is fixed in 1.4.0.

POC

Reference

Github