Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-08773
HistoryNov 16, 2022 - 12:00 a.m.

WordPress Zoho Activity Log Input Validation Error Vulnerability

2022-11-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
12
wordpress
zoho activity log
input validation
vulnerability
http header handler
log output.

EPSS

0.001

Percentile

34.5%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Zoho Activity Log is vulnerable to an input validation error that originates from unknown code in the component HTTP Header Handler, which can be exploited by an attacker to neutralize the log output by manipulating the parameter X-Forwarded-For to cause incorrect log output neutralization.

EPSS

0.001

Percentile

34.5%

Related for CNVD-2023-08773