The WP System Log WordPress plugin before 1.0.21 does not sanitise, validate and escape the IP address retrieved from login requests before outputting them in the admin dashboard, which could allow unauthenticated attack…
CVSS 3.1MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.01343·Published 2021-12-13·Fixed in 1.0.21CWE-79