CVE-2023-34172

35th percentile - higher than 35% of all known CVEs

The Miled WordPress Social Login plugin versions up to 3.0.4 contains a stored Cross-Site Scripting (XSS) vulnerability with admin privileges. An attacker can exploit this flaw to inject malicious scripts that will be executed in the victim's browser context.

Exploitation of this vulnerability may lead to session data theft, account takeover, or other malicious actions. Organizations should be aware of the risks associated with using this plugin in outdated versions.

It is recommended to update the Miled WordPress Social Login plugin to the latest version to mitigate this vulnerability. Additionally, conducting a security audit to identify potential threats is advisable.