CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
What the vulnerability does
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in aviplugins.com Login Widget With Shortcode login-sidebar-widget allows Phishing.This issue affects Login Widget With Shortcode: from n/a through <= 6.1.2.
Explanation of Vulnerability in Simple Terms
Login Widget With Shortcode versions 6.1.2 and earlier contain an open redirect vulnerability. An attacker can craft a malicious link that redirects users to an external website after they interact with the login form. The vulnerability requires user interaction and affects the integrity of the login flow, potentially enabling phishing attacks.
What an attacker can do
Redirect users to a malicious external website after they interact with the login form.
Potential impact on your site
Users may be redirected to phishing sites or malicious domains, compromising account security and trust.
Conditions required to exploit
User must click a crafted link or visit a page containing the vulnerable login widget.
Key dates
External resources
Related vulnerabilities
