66 matches found
Error Log Viewer Plugin <= 1.1.1 - Admin+ Arbitrary File Clearing
The plugin does not validate the path of the log file to clear, allowing high privilege users to clear arbitrary files on the web server, including those outside of the blog folder PoC Click the "Log Monitor" available under Error Log Viewer menu item. Choose a log file to clear. Intercept the...
WordPress error-log-viewer plugin cross-site scripting vulnerability
WordPress is the WordPress Foundation's set of blogging platforms developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. error-log-viewer is an error log viewer plugin used in it. A cross-site scripting vulnerability exists in the WordPress...
CVE-2017-18562
The error-log-viewer plugin before 1.0.6 for WordPress has multiple XSS issues...
Cross site scripting
The error-log-viewer plugin before 1.0.6 for WordPress has multiple XSS issues...
CVE-2017-18562
CVE-2017-18562 affects the WordPress Error Log Viewer plugin by BestWebSoft prior to version 1.0.6. The connected documents confirm multiple XSS flaws in this plugin, enabling an authenticated attacker to execute arbitrary JavaScript in victims’ browsers (potentially stealing session data or acti...
