Vulnerabilities > Wpo365 > Wordpress Azure AD Microsoft Office 365 > 11.18

DATE	CVE	VULNERABILITY TITLE	RISK
2021-11-19	CVE-2021-43409	Cross-site Scripting vulnerability in Wpo365 Wordpress + Azure AD / Microsoft Office 365 The “WPO365 \| LOGIN” WordPress plugin (up to and including version 15.3) by wpo365.com is vulnerable to a persistent Cross-Site Scripting (XSS) vulnerability (also known as Stored or Second-Order XSS). network low complexity wpo365 CWE-79	6.1

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.