title: Erident Custom Login and Dashboard < 3.5.9 - Authenticated Stored Cross-Site Scripting (XSS)
description: The Erident Custom Login and Dashboard WordPress plugin before 3.5.9 did not properly sanitise its settings, allowing high privilege users to use XSS payloads in them (even when the unfileted_html is disabled)
problem types: CWE-79 Cross-site Scripting (XSS)
affected:
{
product: Erident Custom Login and Dashboard
vendor: Libin V Babu
versions:
lessThan: 3.5.9, status: affected, version: 3.5.9, versionType: custom
}