CVE-2024-4477 WP Logs Book <= 1.0.1 - Unauthenticated Stored XSS

2024-06-2106:00:04

WPScan

github.com

cve-2024-4477

wordpress plugin

unauthenticated stored xss

admin dashboard

6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.2%

JSON

The WP Logs Book WordPress plugin through 1.0.1 does not sanitise and escape some of its log data before outputting them back in an admin dashboard, leading to an Unauthenticated Stored Cross-Site Scripting

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "WP Logs Book",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThanOrEqual": "1.0.1"
      }
    ],
    "defaultStatus": "affected"
  }
]