Phying News
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2022-3402] Log HTTP Requests, Version 1.3.1, Advisory

Summary

Advisory on CVE-2022-3402: stored XSS in the Log HTTP Requests WordPress plugin (≤1.3.1) executes JavaScript whenever an admin views logged requests, enabling privilege escalation; fixed in 1.3.2.
Published
Collected

original ↗

Related coverage

back