Skip to content
Sign in
Not rated

CVE-2021-24924 The Email Log WordPress plugin before 2.4.8 does not escape the d parameter before outputting it back in an attribute in…

Description

The Email Log WordPress plugin before 2.4.8 does not escape the d parameter before outputting it back in an attribute in the Log page, leading to a Reflected Cross-Site Scripting issue

Affected products and versions

Product Affected versions Fixed in
Email Log 2.4 earliest → < 2.4.8 2.4.8

Other CVEs of Email Log

The 2 CVEs of Email Log →
CVE-2021-24758 The Email Log WordPress plugin before 2.4.7 does not properly validate, sanitise and escape the "orderby" and "order"… Not rated
Track this CVE