| Package | Affected versions | Patched versions |
|---|---|---|
| openid connect generic client | = 3.8.0= 3.8.1 |
The OpenID Connect Generic Client WordPress plugin 3.8.0 and 3.8.1 did not sanitise the login error when output back in the login form, leading to a reflected Cross-Site Scripting issue. This issue does not require authentication and can be exploited with the default configuration.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free