Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown
CVE-2024-10788
Disclosure Date: November 21, 2024 (last updated January 05, 2025)
The Activity Log – Monitor & Record User Changes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the event parameters in all versions up to, and including, 2.11.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever an administrative user accesses an injected page.
0
Attacker Value
Unknown
CVE-2023-47177
Disclosure Date: November 06, 2023 (last updated November 15, 2023)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Yakir Sitbon, Ariel Klikstein Linker plugin <= 1.2.1 versions.
0
Attacker Value
Unknown
CVE-2016-10890
Disclosure Date: August 21, 2019 (last updated December 27, 2023)
The aryo-activity-log plugin before 2.3.2 for WordPress has XSS.
0
Attacker Value
Unknown
CVE-2016-10891
Disclosure Date: August 21, 2019 (last updated December 27, 2023)
The aryo-activity-log plugin before 2.3.3 for WordPress has XSS.
0
Attacker Value
Unknown
CVE-2018-8729
Disclosure Date: March 15, 2018 (last updated December 27, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in the Activity Log plugin before 2.4.1 for WordPress allow remote attackers to inject arbitrary JavaScript or HTML via a title that is not escaped.
0
