← Back

Email Log

email_log

Vendor: Email Log Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-24924
1Email Log Project
1Email Log
Jun 17, 2026
Dec 6, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The Email Log WordPress plugin before 2.4.8 does not escape the d parameter before outputting it back in an attribute in the Log page, leading to a Reflected Cross-Site Scripting issue
CVE-2021-24758
1Email Log Project
1Email Log
Jun 17, 2026
Nov 17, 2021
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
The Email Log WordPress plugin before 2.4.7 does not properly validate, sanitise and escape the "orderby" and "order" GET parameters before using them in SQL statement in the admin dashboard, leading to SQL injections