Vulnerabilities > Mrpeng > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-10-18 CVE-2023-5538 Cross-site Scripting vulnerability in Mrpeng Mpoperationlogs 1.0.1
The MpOperationLogs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the IP Request Headers in versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping.
network
low complexity
mrpeng CWE-79
6.1