← CVE Intelligence

CVE-2024-4477

WP Logs Book <= 1.0.1 - Unauthenticated Stored XSS PUBLISHED

Description (CNA)

The WP Logs Book WordPress plugin through 1.0.1 does not sanitise and escape some of its log data before outputting them back in an admin dashboard, leading to an Unauthenticated Stored Cross-Site Scripting

Affected (CNA)

Vendor / productVersions
Unknown / WP Logs Bookaffected 0 through 1.0.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.