CVE-2024-10788

The WordPress plugin Activity Log – Monitor & Record User Changes (up to version 2.11.1) is affected by a Stored Cross-Site Scripting (XSS) flaw in the event context due to insufficient input sanitization and output escaping. Unauthenticated attackers could inject arbitrary scripts that run when ...

CVE-2018-8729

CVE-2018-8729 describes multiple Stored XSS flaws in the WordPress Activity Log plugin (aryo-activity-log) prior to 2.4.1. The vulnerability stems from unescaped post/title data stored in logs (e.g., get_the_title calls), allowing remote attackers to inject JavaScript/HTML. Public exploit routes ...

CVE-2016-10890

The CVE-2016-10890 entry concerns the WordPress plugin aryo-activity-log, vulnerable before version 2.3.2 to a cross-site scripting (XSS) flaw. Multiple sources (Red Hat, CNVD, OSV, CVE lists, WPVulnDB) consistently describe an XSS condition affecting the plugin for WordPress; exploitation detail...

CVE-2016-10891

The vulnerability CVE-2016-10891 affects the WordPress plugin aryo-activity-log, specifically versions prior to 2.3.3. The issue is a cross-site scripting (XSS) flaw in that plugin. Impact is limited to client-side script execution on sites using affected plugin versions. Remediation is to upgrad...