CVE-2021-24924: Improper Neutralization of Input During Web Page Generation

The Email Log WordPress plugin before 2.4.8 does not escape the d parameter before outputting it back in an attribute in the Log page, leading to a Reflected Cross-Site Scripting issue...

PT-2021-16369

Name of the Vulnerable Software and Affected Versions: Email Log WordPress plugin versions prior to 2.4.8 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the d parameter is not properly escaped before being outputted back in an attribute on the Log...

CVE-2021-24758: Improper Neutralization of Special Elements used in an SQL Command

The Email Log WordPress plugin before 2.4.7 does not properly validate, sanitise and escape the "orderby" and "order" GET parameters before using them in SQL statement in the admin dashboard, leading to SQL injections...

PT-2021-16259

Name of the Vulnerable Software and Affected Versions: Email Log WordPress plugin versions prior to 2.4.7 Description: The issue concerns the improper validation, sanitization, and escaping of the orderby and order GET parameters in SQL statements within the admin dashboard, leading to potential...