Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: Jh 404 Logger Project Component: Jh 404 Logger Clear all filters
TI-2021-06468 CVE-2021-24176 · GHSA-w784-3vvf-4384

JH 404 Logger <= 1.1 - Unauthenticated Stored Cross-Site Scripting (XSS)

Priority LOW 28

The JH 404 Logger WordPress plugin through 1.1 doesn't sanitise the referer and path of 404 pages, when they are output in the dashboard, which leads to executing arbitrary JavaScript code in the WordPress dashboard.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.02035 Published 2021-04-05 No fix listed CWE-79