Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Email Log Project Clear all filters
TI-2021-07204 CVE-2021-24924 · GHSA-v77r-m6p5-82m8

Email Log < 2.4.8 - Reflected Cross-Site Scripting

Priority LOW 29

The Email Log WordPress plugin before 2.4.8 does not escape the d parameter before outputting it back in an attribute in the Log page, leading to a Reflected Cross-Site Scripting issue

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00827 Published 2021-12-06 Fixed in 2.4.8 CWE-79
TI-2021-07040 CVE-2021-24758 · GHSA-3545-2cxj-jfvg

Email Log < 2.4.7 - Admin+ SQL Injection

Priority MEDIUM 41

The Email Log WordPress plugin before 2.4.7 does not properly validate, sanitise and escape the "orderby" and "order" GET parameters before using them in SQL statement in the admin dashboard, leading to SQL injections

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01334 Published 2021-11-17 Fixed in 2.4.7 CWE-89