CVE

CVE-2021-24214

6.1

CVSS

Description

The OpenID Connect Generic Client WordPress plugin 3.8.0 and 3.8.1 did not sanitise the login error when output back in the login form, leading to a reflected Cross-Site Scripting issue. This issue does not require authentication and can be exploited with the default configuration.

Attack Vector

Privileges Req.

User Interaction

openid connect generic client

Updated Oct 24, 2026View on NVD →

S4E scanner

mediumProduct Based Web Vulnerabilities~10 seconds

CVE-2021-24214 Scanner

CVE-2021-24214 scanner - Cross-Site Scripting (XSS) vulnerability in OpenID Connect Generic Client plugin for WordPress

Used 2.7k times · 3.4k assets checked · url

Scanner page →Run scanner

CVE history: openid connect generic client

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →