Read the docs

Jh 404 Logger Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Jh 404 Logger Project records in CISA KEV

No Jh 404 Logger Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Jh 404 Logger 1 record LOW

Records

1 record

TI-2021-06468 CVE-2021-24176 · GHSA-w784-3vvf-4384

JH 404 Logger <= 1.1 - Unauthenticated Stored Cross-Site Scripting (XSS)

Priority LOW 28

The JH 404 Logger WordPress plugin through 1.1 doesn't sanitise the referer and path of 404 pages, when they are output in the dashboard, which leads to executing arbitrary JavaScript code in the WordPress dashboard.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.02035 Published 2021-04-05 No fix listed CWE-79
Open these records in search →