CVE-2024-4477
WP Logs Book <= 1.0.1 - Unauthenticated Stored XSS
MEDIUM 5.4EPSS 0.3%
The WP Logs Book WordPress plugin through 1.0.1 does not sanitise and escape some of its log data before outputting them back in an admin dashboard, leading to an Unauthenticated Stored Cross-Site Scripting
- Affected
- WP Logs Book
- CVSS v3.1 NVD
- 5.4 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N - CVSS v3.1 CNA
- 4.3 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L - EPSS
- 0.31% chance of exploitation in the next 30 days, 22nd percentile
- Published
- 2024-06-21
- Updated
- 2024-08-01