2.3.3

DATE	CVE	VULNERABILITY TITLE	RISK
2018-03-15	CVE-2018-8729	Cross-site Scripting vulnerability in Pojo Activity LOG Multiple cross-site scripting (XSS) vulnerabilities in the Activity Log plugin before 2.4.1 for WordPress allow remote attackers to inject arbitrary JavaScript or HTML via a title that is not escaped. network low complexity pojo CWE-79	6.1

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.