CVE-2021-24176: Jh 404 Logger Project Jh 404 Logger

Medium severity, CVSS 5.4. EPSS: 2% chance of exploitation in the next 30 days.

The JH 404 Logger WordPress plugin through 1.1 doesn't sanitise the referer and path of 404 pages, when they are output in the dashboard, which leads to executing arbitrary JavaScript code in the WordPress dashboard.

Affected products

• Jh 404 Logger Project Jh 404 Logger: up to and including 1.1

Published 2021-04-05. Last modified 2026-06-17.