CVE-2021-24924
06.12.2021, 16:15
The Email Log WordPress plugin before 2.4.8 does not escape the d parameter before outputting it back in an attribute in the Log page, leading to a Reflected Cross-Site Scripting issue
| Vendor | Product | Version |
|---|---|---|
| email_log_project | email_log | 𝑥 < 2.4.8 |
𝑥
= Vulnerable software versions