Read the docs

Wp System Log Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Wp System Log Project records in CISA KEV

No Wp System Log Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp System Log 1 record LOW

Records

1 record in Wp System Log · all components

TI-2021-07038 CVE-2021-24756 · GHSA-x547-6pg3-h56r

WP System Log < 1.0.21 - Unauthenticated Stored Cross-Site Scripting

Priority LOW 30

The WP System Log WordPress plugin before 1.0.21 does not sanitise, validate and escape the IP address retrieved from login requests before outputting them in the admin dashboard, which could allow unauthenticated attack…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01343 Published 2021-12-13 Fixed in 1.0.21 CWE-79
Open these records in search →