CVE-2022-27858: activity log project activity log – CVSS 9.8 · Watchpost

← All vulnerabilities

CVE-2022-27858

严重 9.8CVE-2022-27858 · Published 08/11/2022 · updated 17/06/2026

要点

CVE-2022-27858 是影响 activity log (activity log project) 的严重 (CVSS 9.8)漏洞。
未来 30 天内被利用的概率（EPSS）：1.0%，高于 64.4% 的漏洞。
修复：升级到 2.8.4 或更高版本。

Package	Affected versions	Patched versions
activity log activity_log_project	`< 2.8.4`	`2.8.4`

Description

CSV Injection vulnerability in Activity Log Team Activity Log <= 2.8.3 on WordPress.

References

patchstack.com/database/vulnerability/aryo-activity-log/wordpress-activity-log-plugin-2-8-3-csv-injection-vulnerability · Third Party Advisory

activity log 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free