Vulnerabilities > CVE-2023-5167 - Unspecified vulnerability in Solwininfotech User Activity LOG
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
LOW Integrity impact
LOW Availability impact
NONE Summary
The User Activity Log Pro WordPress plugin before 2.3.4 does not properly escape recorded User-Agents in the user activity logs dashboard, which may allow visitors to conduct Stored Cross-Site Scripting attacks.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |