User Activity Log < 1.4.7 - Reflected Cross-Site Scripting

The plugin does not escape the txtsearch parameter before outputting it in an attribute, leading to a Reflected Cross-Site Scripting issue https://example.com/wp-admin/admin.php?page=useractionlog&txtsearch=%22+style%3Danimation-name%3Arotation+onanimationstart%3Dalert%28%2FXSS%2F%29%2F%2F...

User Activity Log < 1.4.7 - Reflected Cross Site Scripting via Query String

The plugin does not escape the $SERVER'QUERYSTRING' before outputting it back in attributes, which could lead to Reflected Cross-Site Scripting in web browsers which do not encode URL characters. With a web browser which does not encode characters or use burp suite and decode the URL via the...

Activity Log < 2.7.0 - Authenticated SQL Injection

The plugin was vulnerable to SQL Injection in the order column of the past events table. time curl 'http://www.example.com/wp-admin/admin.php?page=activitylogpage&orderby=histtime%20AND%20SLEEP%280%29' -H 'Cookie: ...'...

WordPress Activity Log plugin <= 2.6.1 - Authenticated SQL Injection (SQLi) vulnerability

Authenticated SQL Injection SQLi vulnerability discovered by Synacktiv in WordPress Activity Log plugin versions = 2.6.1. Solution Update the WordPress Activity Log plugin to the latest available version at least 2.7.0...

WordPress WP Activity Log plugin <= 4.1.4 - SQL Injection (SQLi) in External Database Module vulnerability

SQL Injection SQLi in External Database Module vulnerability found by WP deeply in WordPress WP Activity Log plugin versions = 4.1.4 . Solution Update the WordPress WP Activity Log plugin to the latest available version at least 4.1.5...

WordPress aryo-activity-log plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. aryo-activity-log is a weblog plugin used in it. A cross-site scripting vulnerability exists in the WordPress aryo-activity-log...

WordPress aryo-activity-log plugin cross-site scripting vulnerability (CNVD-2019-32409)

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. aryo-activity-log is a weblog plugin used in it. A cross-site scripting vulnerability exists in the WordPress aryo-activity-log...

CVE-2016-10890

The aryo-activity-log plugin before 2.3.2 for WordPress has XSS...

CVE-2016-10890

The aryo-activity-log plugin before 2.3.2 for WordPress has XSS...

CVE-2016-10891

The aryo-activity-log plugin before 2.3.3 for WordPress has XSS...

Cross site scripting

The aryo-activity-log plugin before 2.3.3 for WordPress has XSS...

Cross site scripting

The aryo-activity-log plugin before 2.3.2 for WordPress has XSS...

CVE-2016-10890

The aryo-activity-log plugin before 2.3.2 for WordPress has XSS...

CVE-2016-10890

The CVE-2016-10890 entry concerns the WordPress plugin aryo-activity-log, vulnerable before version 2.3.2 to a cross-site scripting (XSS) flaw. Multiple sources (Red Hat, CNVD, OSV, CVE lists, WPVulnDB) consistently describe an XSS condition affecting the plugin for WordPress; exploitation detail...

CVE-2016-10891

The vulnerability CVE-2016-10891 affects the WordPress plugin aryo-activity-log, specifically versions prior to 2.3.3. The issue is a cross-site scripting (XSS) flaw in that plugin. Impact is limited to client-side script execution on sites using affected plugin versions. Remediation is to upgrad...

CVE-2016-10891

The aryo-activity-log plugin before 2.3.3 for WordPress has XSS...

PT-2019-7686 · WordPress · Aryo-Activity-Log

Name of the Vulnerable Software and Affected Versions: aryo-activity-log plugin versions prior to 2.3.2 for WordPress Description: The issue is related to a Cross-Site Scripting XSS problem. XSS is a type of security vulnerability that allows an attacker to inject malicious scripts into a website...

PT-2019-7687 · WordPress · Aryo-Activity-Log

Name of the Vulnerable Software and Affected Versions: aryo-activity-log plugin versions prior to 2.3.3 for WordPress Description: The issue is related to a Cross-Site Scripting XSS problem. XSS is a type of security vulnerability that allows an attacker to inject malicious scripts into a website...

Wordpress Activity Log 2.4.0 Plugin - Stored Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title : Activity Log Wordpress Plugin Stored Cross Site Scripting XSS Exploit Author : Stefan Broeder Vendor Homepage: https://pojo.me Software Link: https://wordpress.org/plugins/aryo-activity-log/ Version: 2.4.0 CVE : CVE-2018-8729...

Wordpress Plugin Activity Log 2.4.0 - Stored Cross-Site Scripting

Wordpress Plugin Activity Log 2.4.0 - Stored Cross-Site Scripting Exploit Title : Activity Log Wordpress Plugin Stored Cross Site Scripting XSS Date: 25-02-2018 Exploit Author : Stefan Broeder Vendor Homepage: https://pojo.me Software Link: https://wordpress.org/plugins/aryo-activity-log/ Version...