User Activity Log, d3f2489e82d0ec4cee04bbfb445022606b02a5a5

CVE, Research URL: d3f2489e82d0ec4cee04bbfb445022606b02a5a5
Home page URL: Security reports for User Activity Log
Application: User Activity Log
Published on: Jul 29, 2017
Research Description: User Activity Log [user-activity-log] < 1.6.2 WordPress User Activity Log Plugin <= 1.2.3 - Cross-Site Request Forgery (CSRF) and Cross-Site Scripting (XSS) Vulnerabilities There's no escaping done for $from_email and $to_email variables. Also, there's missing a nonce check. Update the plugin.
Affected versions: max 1.6.2.
Status: vulnerable