CVE-2023-34175

29th percentile - higher than 29% of all known CVEs

The GrandSlambert Login Configurator plugin versions <= 2.1 has an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability. An attacker can exploit this flaw to inject malicious scripts.

This vulnerability may lead to session hijacking and other attacks on the web application, posing a threat to the organization's data security.

It is recommended to update the GrandSlambert Login Configurator plugin to the latest version to mitigate this vulnerability. A security audit of the application should also be conducted.