WordPress Activity Log Plugin Cross-Site Scripting Vulnerability
Publish Date: 21 de сентября de 2016
Severity: : Medium
DESCRIPTION
A cross-site scripting (XSS) vulnerability exists in WordPress Activity Log plugin, allow remote attackers to execute same-origin JavaScript functions via crafted parameter. A successful attack could lead sensitive information disclosure.
INFORMATION EXPOSURE
Apply associated Trend Micro DPI Rules.
SOLUTION
Trend Micro Deep Security DPI Rule Number: 1000552