WordPress Activity Log Plugin Cross-Site Scripting Vulnerability

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

  Severity: MEDIUM

---

  DESCRIPTION

A cross-site scripting (XSS) vulnerability exists in WordPress Activity Log plugin, allow remote attackers to execute same-origin JavaScript functions via crafted parameter. A successful attack could lead sensitive information disclosure.

  TREND MICRO PROTECTION INFORMATION

Apply associated Trend Micro DPI Rules.

  SOLUTION

  Trend Micro Deep Security DPI Rule Number: 1000552