Vulnerabilities > Nextendweb > Nextend Social Login > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-03-02 | CVE-2024-1775 | Cross-site Scripting vulnerability in Nextendweb Nextend Social Login The Nextend Social Login and Register plugin for WordPress is vulnerable to a self-based Reflected Cross-Site Scripting via the ‘error_description’ parameter in all versions up to, and including, 3.1.12 due to insufficient input sanitization and output escaping. | 5.4 |