CVE-2021-24924

The Email Log WordPress plugin before 2.4.8 does not escape the d parameter before outputting it back in an attribute in the Log page, leading to a Reflected Cross-Site Scripting issue...

CVE-2021-24924 Email Log < 2.4.8 - Reflected Cross-Site Scripting

The Email Log WordPress plugin before 2.4.8 does not escape the d parameter before outputting it back in an attribute in the Log page, leading to a Reflected Cross-Site Scripting issue...

CVE-2021-24924

The CVE-2021-24924 relates to the WordPress Email Log plugin before version 2.4.8. The issue is a Reflected Cross-Site Scripting (XSS) vulnerability caused by not escaping the d parameter before echoing it in an attribute on the Log page. Affected component: Email Log plugin (WordPress). Impact i...