CVE-2021-24756

MEDIUM

WP System Log < 1.0.21 - Unauthenticated Stored Cross-Site Scripting

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2021-24756 has a selected CVSS score of 6.1 (medium); EIP currently links 2 curated repository PoCs.

Description

The WP System Log WordPress plugin before 1.0.21 does not sanitise, validate and escape the IP address retrieved from login requests before outputting them in the admin dashboard, which could allow unauthenticated attacker to perform Cross-Site Scripting attacks against admins viewing the logs.

Description source: CVE List

Exploitation context

Available material

Curated repository PoCs
2

Affected products and versions

1
ProductSourceVersion range

WP System Log

CVE List1.0.21 to < 1.0.21affected

Proofs of concept

2

Curated repository PoCs

GitHubCVE-2021-24756Curated repository PoCby yubsy112Not analyzed1 file

Python · 989 B

GitHub
PoC details
GitHubCVE-2021-24756Curated repository PoCby 0xd3vil127Not analyzed1 file

Python · 989 B

GitHub
PoC details

References

2