Vulnerability — CVE-2023-5167

CVE-2023-5167

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2023-5167
Description:: The User Activity Log Pro WordPress plugin before 2.3.4 does not properly escape recorded User-Agents in the user activity logs dashboard, which may allow visitors to conduct Stored Cross-Site Scripting attacks.
Last updated date:: 10/20/2023

Type:: exploit
Confidence:: HIGH
Date of publishing:: 10/20/2023
Reference url to background: https://wpscan.com/vulnerability/78ea6fe0-5fac-4923-949c-023c85fe2437