2 matches found
CVE-2024-0868
The CVE-2024-0868 entry concerns the WordPress coreActivity: Activity Logging plugin for WordPress (versions
CVE-2024-0852
coreActivity: Activity Logging plugin for WordPress (prior to 1.8.1) is vulnerable to unauthenticated Stored XSS due to insufficient escaping of certain request data when rendering in the admin logs dashboard. The issue allows an unauthenticated attacker to craft input that could execute JavaScri...