← Back

Daggerhartlab

daggerhartlab

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Openid Connect Generic Client
openid_connect_generic_client
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-24214
1Daggerhartlab
1Openid Connect Generic Client
Jun 17, 2026
May 6, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The OpenID Connect Generic Client WordPress plugin 3.8.0 and 3.8.1 did not sanitise the login error when output back in the login form, leading to a reflected Cross-Site Scripting issue. This issue does not require authe...Show more
The OpenID Connect Generic Client WordPress plugin 3.8.0 and 3.8.1 did not sanitise the login error when output back in the login form, leading to a reflected Cross-Site Scripting issue. This issue does not require authentication and can be exploited with the default configuration.Show less