CVE-2016-10890

The aryo-activity-log plugin before 2.3.2 for WordPress has XSS...

CVE-2016-10890

The CVE-2016-10890 entry concerns the WordPress plugin aryo-activity-log, vulnerable before version 2.3.2 to a cross-site scripting (XSS) flaw. Multiple sources (Red Hat, CNVD, OSV, CVE lists, WPVulnDB) consistently describe an XSS condition affecting the plugin for WordPress; exploitation detail...