PT-2022-18645 · WordPress · Activity Log Team Activity Log

CVE-2022-27858

Published

2022-11-08

Updated

2024-09-16

CVSS v3.1

9.8

Critical

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Activity Log Team Activity Log versions 2.8.3 and earlier

Description A CSV Injection issue has been identified. This issue affects the Activity Log Team Activity Log plugin on WordPress.

Recommendations For versions 2.8.3 and earlier, update to a version later than 2.8.3 to resolve the issue.

Fix

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2022-27858

Activity Log Team Activity Log