Non notée
CVE-2021-24924 The Email Log WordPress plugin before 2.4.8 does not escape the d parameter before outputting it back in an attribute in…
Description
The Email Log WordPress plugin before 2.4.8 does not escape the d parameter before outputting it back in an attribute in the Log page, leading to a Reflected Cross-Site Scripting issue
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Email Log 2.4 | premières → < 2.4.8 | 2.4.8 |