Description
The JH 404 Logger WordPress plugin through 1.1 doesn't sanitise the referer and path of 404 pages, when they are output in the dashboard, which leads to executing arbitrary JavaScript code in the WordPress dashboard.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | JH 404 Logger | 1.1 – ≤ 1.1 | — |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- WordPress JH 404 Logger <=1.1 - Cross-Site Scripting http/cves/2021/CVE-2021-24176.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.