CVE-2019-25315

MEDIUM

WP Server Log Viewer 1.0 - 'logfile' Persistent Cross-Site Scripting

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2019-25315 has a selected CVSS score of 5.1 (medium); EIP currently links 1 catalogued exploit.

Description

WordPress Server Log Viewer 1.0 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts through unfiltered log file paths. Attackers can add log files with embedded XSS payloads that will execute when viewed in the WordPress admin interface.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 11, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

WP Server Log Viewer

Browse anttiviljami / WP Server Log Viewer
CVE List1.0affected

Proofs of concept

1

Catalogued exploits

ExploitDBWP Server Log Viewer 1.0 - 'logfile' Persistent Cross-Site ScriptingExploitDB exploitby striderNot analyzed1 file
ExploitDB
PoC details

References

4