Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
2 vulnerabilities by jh_404_logger_project
CVE-2021-24176 (GCVE-0-2021-24176)
Vulnerability from cvelistv5 – Published: 2021-04-05 18:27 – Updated: 2024-08-03 19:21
VLAI
Title
JH 404 Logger <= 1.1 - Unauthenticated Stored Cross-Site Scripting (XSS)
Summary
The JH 404 Logger WordPress plugin through 1.1 doesn't sanitise the referer and path of 404 pages, when they are output in the dashboard, which leads to executing arbitrary JavaScript code in the WordPress dashboard.
Severity
No CVSS data available.
CWE
- CWE-79 - Cross-site Scripting (XSS)
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://wpscan.com/vulnerability/705bcd6e-6817-4f… | x_refsource_CONFIRM |
| https://ganofins.com/blog/my-first-cve-2021-24176/ | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Unknown | JH 404 Logger |
Affected:
1.1 , ≤ 1.1
(custom)
|
Credits
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T19:21:18.783Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://wpscan.com/vulnerability/705bcd6e-6817-4f89-be37-901a767b0585"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://ganofins.com/blog/my-first-cve-2021-24176/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "JH 404 Logger",
"vendor": "Unknown",
"versions": [
{
"lessThanOrEqual": "1.1",
"status": "affected",
"version": "1.1",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"value": "Ganesh Bagaria"
}
],
"descriptions": [
{
"lang": "en",
"value": "The JH 404 Logger WordPress plugin through 1.1 doesn\u0027t sanitise the referer and path of 404 pages, when they are output in the dashboard, which leads to executing arbitrary JavaScript code in the WordPress dashboard."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "CWE-79 Cross-site Scripting (XSS)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-09-29T10:14:44.000Z",
"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"shortName": "WPScan"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://wpscan.com/vulnerability/705bcd6e-6817-4f89-be37-901a767b0585"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://ganofins.com/blog/my-first-cve-2021-24176/"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "JH 404 Logger \u003c= 1.1 - Unauthenticated Stored Cross-Site Scripting (XSS)",
"x_generator": "WPScan CVE Generator",
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "contact@wpscan.com",
"ID": "CVE-2021-24176",
"STATE": "PUBLIC",
"TITLE": "JH 404 Logger \u003c= 1.1 - Unauthenticated Stored Cross-Site Scripting (XSS)"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "JH 404 Logger",
"version": {
"version_data": [
{
"version_affected": "\u003c=",
"version_name": "1.1",
"version_value": "1.1"
}
]
}
}
]
},
"vendor_name": "Unknown"
}
]
}
},
"credit": [
{
"lang": "eng",
"value": "Ganesh Bagaria"
}
],
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The JH 404 Logger WordPress plugin through 1.1 doesn\u0027t sanitise the referer and path of 404 pages, when they are output in the dashboard, which leads to executing arbitrary JavaScript code in the WordPress dashboard."
}
]
},
"generator": "WPScan CVE Generator",
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-79 Cross-site Scripting (XSS)"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://wpscan.com/vulnerability/705bcd6e-6817-4f89-be37-901a767b0585",
"refsource": "CONFIRM",
"url": "https://wpscan.com/vulnerability/705bcd6e-6817-4f89-be37-901a767b0585"
},
{
"name": "https://ganofins.com/blog/my-first-cve-2021-24176/",
"refsource": "MISC",
"url": "https://ganofins.com/blog/my-first-cve-2021-24176/"
}
]
},
"source": {
"discovery": "UNKNOWN"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"assignerShortName": "WPScan",
"cveId": "CVE-2021-24176",
"datePublished": "2021-04-05T18:27:44.000Z",
"dateReserved": "2021-01-14T00:00:00.000Z",
"dateUpdated": "2024-08-03T19:21:18.783Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-24176 (GCVE-0-2021-24176)
Vulnerability from nvd – Published: 2021-04-05 18:27 – Updated: 2024-08-03 19:21
VLAI
Title
JH 404 Logger <= 1.1 - Unauthenticated Stored Cross-Site Scripting (XSS)
Summary
The JH 404 Logger WordPress plugin through 1.1 doesn't sanitise the referer and path of 404 pages, when they are output in the dashboard, which leads to executing arbitrary JavaScript code in the WordPress dashboard.
Severity
No CVSS data available.
CWE
- CWE-79 - Cross-site Scripting (XSS)
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://wpscan.com/vulnerability/705bcd6e-6817-4f… | x_refsource_CONFIRM |
| https://ganofins.com/blog/my-first-cve-2021-24176/ | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Unknown | JH 404 Logger |
Affected:
1.1 , ≤ 1.1
(custom)
|
Credits
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T19:21:18.783Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://wpscan.com/vulnerability/705bcd6e-6817-4f89-be37-901a767b0585"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://ganofins.com/blog/my-first-cve-2021-24176/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "JH 404 Logger",
"vendor": "Unknown",
"versions": [
{
"lessThanOrEqual": "1.1",
"status": "affected",
"version": "1.1",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"value": "Ganesh Bagaria"
}
],
"descriptions": [
{
"lang": "en",
"value": "The JH 404 Logger WordPress plugin through 1.1 doesn\u0027t sanitise the referer and path of 404 pages, when they are output in the dashboard, which leads to executing arbitrary JavaScript code in the WordPress dashboard."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "CWE-79 Cross-site Scripting (XSS)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-09-29T10:14:44.000Z",
"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"shortName": "WPScan"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://wpscan.com/vulnerability/705bcd6e-6817-4f89-be37-901a767b0585"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://ganofins.com/blog/my-first-cve-2021-24176/"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "JH 404 Logger \u003c= 1.1 - Unauthenticated Stored Cross-Site Scripting (XSS)",
"x_generator": "WPScan CVE Generator",
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "contact@wpscan.com",
"ID": "CVE-2021-24176",
"STATE": "PUBLIC",
"TITLE": "JH 404 Logger \u003c= 1.1 - Unauthenticated Stored Cross-Site Scripting (XSS)"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "JH 404 Logger",
"version": {
"version_data": [
{
"version_affected": "\u003c=",
"version_name": "1.1",
"version_value": "1.1"
}
]
}
}
]
},
"vendor_name": "Unknown"
}
]
}
},
"credit": [
{
"lang": "eng",
"value": "Ganesh Bagaria"
}
],
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The JH 404 Logger WordPress plugin through 1.1 doesn\u0027t sanitise the referer and path of 404 pages, when they are output in the dashboard, which leads to executing arbitrary JavaScript code in the WordPress dashboard."
}
]
},
"generator": "WPScan CVE Generator",
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-79 Cross-site Scripting (XSS)"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://wpscan.com/vulnerability/705bcd6e-6817-4f89-be37-901a767b0585",
"refsource": "CONFIRM",
"url": "https://wpscan.com/vulnerability/705bcd6e-6817-4f89-be37-901a767b0585"
},
{
"name": "https://ganofins.com/blog/my-first-cve-2021-24176/",
"refsource": "MISC",
"url": "https://ganofins.com/blog/my-first-cve-2021-24176/"
}
]
},
"source": {
"discovery": "UNKNOWN"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"assignerShortName": "WPScan",
"cveId": "CVE-2021-24176",
"datePublished": "2021-04-05T18:27:44.000Z",
"dateReserved": "2021-01-14T00:00:00.000Z",
"dateUpdated": "2024-08-03T19:21:18.783Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}