WordPress Plugin Vulnerabilities

Log HTTP Requests < 1.3.2 - Stored Cross-Site Scripting

Description

The plugin does not sanitise and escape a parameter, which could lead to Stored Cross-Site Scriptingill execute whenever a user accesses an injected page.

Affects Plugins

Fixed in 1.3.2

References

Classification

Type
XSS
CWE

Miscellaneous

Original Researcher
Etan Imanol Castro Aldrete
Verified
No

Timeline

Publicly Published
2022-10-05 (about 1 years ago)
Added
2022-10-27 (about 1 years ago)
Last Updated
2022-10-27 (about 1 years ago)

Other