CVE-2023-34023

HighCVSS 7.1

Published: 30/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.45%

35th percentile - higher than 35% of all known CVEs

Summary

The Miled WordPress Social Login plugin versions up to 3.0.4 has an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability. An attacker can exploit this flaw to inject malicious scripts.

Risk Assessment

Exploitation of this vulnerability may lead to user data theft or session hijacking. Organizations should be aware of the risks associated with data security.

Recommendation

It is recommended to update the Miled WordPress Social Login plugin to the latest version to mitigate this vulnerability. Additionally, conducting a security audit of the application is advisable.

Other vulnerabilities in Miled WordPress Social Login plugin

CVE-2023-34172Medium
The Miled WordPress Social Login plugin versions up to 3.0.4 contains a stored Cross-Site Scripting (XSS) vulnerability with admin privileges. An attacker can exploit this flaw to inject malicious scripts that will be executed in the victim's browser context.

Original NVD description (English source)

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Miled WordPress Social Login plugin <= 3.0.4 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS