Mlfactory

mlfactory

1 CVE • 1 product

Products (1)

Click to collapse

Toggle

Dsgvo All In One For Wp

dsgvo_all_in_one_for_wp

1 CVE

CVEs (1)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-24294 1Mlfactory 1Dsgvo All In One For Wp Jun 17, 2026 May 24, 2021 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The dsgvoaio_write_log AJAX action of the DSGVO All in one for WP WordPress plugin before 4.0 did not sanitise or escape some POST parameter submitted before outputting them in the Log page in the administrator dashboard...Show more The dsgvoaio_write_log AJAX action of the DSGVO All in one for WP WordPress plugin before 4.0 did not sanitise or escape some POST parameter submitted before outputting them in the Log page in the administrator dashboard (wp-admin/admin.php?page=dsgvoaiofree-show-log). This could allow unauthenticated attackers to gain unauthorised access by using an XSS payload to create a rogue administrator account, which will be trigged when an administrator will view the logs.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2021-24294

1Mlfactory

1Dsgvo All In One For Wp

Jun 17, 2026

May 24, 2021

N/A· v4

6.1 MEDIUM· v3

4.3 MEDIUM· v2

The dsgvoaio_write_log AJAX action of the DSGVO All in one for WP WordPress plugin before 4.0 did not sanitise or escape some POST parameter submitted before outputting them in the Log page in the administrator dashboard (wp-admin/admin.php?page=dsgvoaiofree-show-log). This could allow unauthenticated attackers to gain unauthorised access by using an XSS payload to create a rogue administrator account, which will be trigged when an administrator will view the logs.Show less