CVE-2021-24214

6.1 mediumEPSS 1.6%

Medium (6.1) in daggerhartlab openid connect generic client. EPSS 1.6% chance of exploitation in the next 30 days.

The OpenID Connect Generic Client WordPress plugin 3.8.0 and 3.8.1 did not sanitise the login error when output back in the login form, leading to a reflected Cross-Site Scripting issue. This issue does not require authentication and can be exploited with the default configuration.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2021-05-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

daggerhartlab:openid_connect_generic_client

References

https://wpscan.com/vulnerability/31cf0dfb-4025-4898-a5f4-fc7115565a10
https://wpscan.com/vulnerability/31cf0dfb-4025-4898-a5f4-fc7115565a10

Check your stack JSON