WP Mail Logging, 16a4582a65ef1c749500b25a8972af811c2b8de7

CVE, Research URL: 16a4582a65ef1c749500b25a8972af811c2b8de7
Home page URL: Security reports for WP Mail Logging
Application: WP Mail Logging
Published on: Nov 11, 2017
Research Description: WP Mail Logging [wp-mail-logging] < 1.8.3 WP Mail Logging <= 1.8.2 - Cross-Site Scripting The WP Mail Logging plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘extractMessage’ and 'column_default' functions in versions up to, and including, 1.8.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Affected versions: max 1.8.3.
Status: vulnerable