Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:wp_system_log:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductWp System Log (7cd414c8-0494-5e87-90c8-3f99ed1f970b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-24756 vulnerable 2026-06-08 05:30:39.172383 WP System Log < 1.0.21 - Unauthenticated Stored Cross-Site Scripting
The WP System Log WordPress plugin before 1.0.21 does not sanitise, validate and escape the IP address retrieved from login requests before outputting them in the admin dashboard, which could allow unauthenticated attacker to perform Cross-Site Scripting attacks against admins viewing the logs.
Published: 2021-12-13T10:40:47.000Z
Updated: 2024-08-03T19:42:16.815Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.