CVE-2024-4477
WP Logs Book <= 1.0.1 - Unauthenticated Stored XSS
- State
- Published
- Severity
- 4.3 Medium
- Published
- Jun 21, 2024
- Updated
- Aug 1, 2024
- Reserved
- May 3, 2024
Description
The WP Logs Book WordPress plugin through 1.0.1 does not sanitise and escape some of its log data before outputting them back in an admin dashboard, leading to an Unauthenticated Stored Cross-Site Scripting
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 4.3 Medium | CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L | CISA-ADP |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
WP Logs BookUnknown |
|
References
- https://wpscan.com/vulnerability/ab551552-944c-4e2a-9355-7011cbe553b0/exploitvdb-entrytechnical-description
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.