7.1
Élevée
CVE-2023-50905 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP Activity Log allows Stored XSS.This issue affects WP Activity Log: from n/a through 4.6.1.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WP Activity Log 4.6 | premières → 4.6.1 | Pas de correctif indiqué |
| wp_activity_log 4.6 | premières → 4.6.1 | Pas de correctif indiqué |
Autres CVE de WP Activity Log
Les 15 CVE de WP Activity Log →
CVE-2026-120075
The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and…
7.2
Élevée
CVE-2026-62085
Administrator SQL Injection in WP Activity Log <= 5.6.6 versions
7.6
Élevée
CVE-2026-65512
Cross-Site request forgery (CSRF) vulnerability in Melapress WP Activity Log and Melapress WP Activity Log Premium…
5.4
Moyenne
CVE-2026-56005
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP…
7.1
Élevée