CVE-2019-25315mediumCWE-79

CVE-2019-25315: medium-severity vulnerability in anttiviljami WP Server Log Viewer

WP Server Log Viewer 1.0 - 'logfile' Persistent Cross-Site Scripting

Published

Follow this CVE+ Monitor WP Server Log Viewer

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.1epss 0.2%
WordPress Server Log Viewer 1.0 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts through unfiltered log file paths. Attackers can add log files with embedded XSS payloads that will execute when viewed in the WordPress admin interface.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
Affected products
anttiviljami · WP Server Log Viewer