Email Log Project Email Log
2 CVEs affecting Email Log Project Email Log. Latest disclosed: 2021-12-06. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-24758 | High | 8.8 | 2021-11-17 | The Email Log WordPress plugin before 2.4.7 does not properly validate, sanitise and escape the "orderby" and "order" GET parameters before using them in SQL s… |
CVE-2021-24924 | Medium | 6.1 | 2021-12-06 | The Email Log WordPress plugin before 2.4.8 does not escape the d parameter before outputting it back in an attribute in the Log page, leading to a Reflected C… |