title: User Activity Log Pro < 2.3.4 - Unauthenticated Stored Cross-Site Scripting via User Agent
description: The User Activity Log Pro WordPress plugin before 2.3.4 does not properly escape recorded User-Agents in the user activity logs dashboard, which may allow visitors to conduct Stored Cross-Site Scripting attacks.
problem types: CWE-79 Cross-Site Scripting (XSS)
affected:
{
vendor: Unknown
product: user-activity-log-pro
versions:
status: affected, versionType: custom, version: 0, lessThan: 2.3.4
defaultStatus: unaffected
}