Medium
CVSS 4.3
Overview
List Site Pro 2.0 allows remote attackers to hijack user accounts by inserting a "|" (pipe), which is used as a field delimiter, into the bannerurl field.
List Site Pro 2.0 allows remote attackers to hijack user accounts by inserting a...
List Site Pro 2.0 allows remote attackers to hijack user accounts by inserting a "|" (pipe), which is used as a field delimiter, into the bannerurl field.
This vulnerability is rated 🟡 MEDIUM.
Recommended actions: