CVE-2021-24176

CVE-2021-24176: JH 404 Logger <= 1.1 - Unauthenticated Stored Cross-Site Scripting (XSS)

Vendor Unknown
Product JH 404 Logger
Weakness CWE-79 · XSS
Published April 5, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The JH 404 Logger WordPress plugin through 1.1 doesn't sanitise the referer and path of 404 pages, when they are output in the dashboard, which leads to executing arbitrary JavaScript code in the WordPress dashboard.

Key dates

02Disclosure timeline

April 5, 2021 CVE published
August 3, 2024 Record updated