A vulnerability has been found in Activity Log Plugin on WordPress and classified as critical. This vulnerability affects unknown code of the component HTTP Header Handler. Performing a manipulation of the argument X-Forwarded-For results in improper output neutralization for logs.
This vulnerability is reported as CVE-2022-3941. The attack is possible to be carried out remotely. Moreover, an exploit is present.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2022-3941 | Activity Log Plugin on WordPress HTTP Header X-Forwarded-For neutralization for logs (EUVD-2022-43275)
A vulnerability has been found in Activity Log Plugin on WordPress and classified as critical. This vulnerability affects unknown code of the component HTTP Header Handler. Performing a manipulation of the argument X-Forwarded-For results…
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR