CVE-2017-15867

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2017-15867

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-15867.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2017-15867

Published

2017-10-24T19:29:00.197Z

Modified

2026-07-08T05:51:28.493448836Z

Severity

6.1 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

[none]

Details

Multiple cross-site scripting (XSS) vulnerabilities in the user-login-history plugin through 1.5.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) datefrom, (2) dateto, (3) userid, (4) username, (5) countryname, (6) browser, (7) operatingsystem, or (8) ipaddress parameter to admin/partials/listing/listing.php.

Database specific

{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:a:user-login-history_project:user-login-history:*:*:*:*:*:wordpress:*:*"
            ],
            "extracted_events": [
                {
                    "last_affected": "1.5.2"
                }
            ],
            "vendor_product": "user-login-history_project:user-login-history",
            "source": "CPE_RANGE"
        },
        {
            "extracted_events": [
                {
                    "fixed": "1.5.2"
                }
            ],
            "source": "DESCRIPTION"
        }
    ]
}

References

Affected packages

Git / github.com/faiyazalam/wordpress-plugin-user-login-history

Affected ranges

Type

GIT

Repo

https://github.com/faiyazalam/wordpress-plugin-user-login-history

Events

Introduced

Fixed

519341a7dece59e2c589b908a636e6cf12a61741

Database specific

{
    "source": "REFERENCES"
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-15867.json"