{"id":"CVE-2016-10891","details":"The aryo-activity-log plugin before 2.3.3 for WordPress has XSS.","modified":"2026-07-08T05:48:26.237770856Z","published":"2019-08-21T19:15:12.403Z","database_specific":{"unresolved_ranges":[{"source":"CPE_RANGE","vendor_product":"pojo:activity_log","cpes":["cpe:2.3:a:pojo:activity_log:*:*:*:*:*:wordpress:*:*"],"extracted_events":[{"fixed":"2.3.3"}]}]},"references":[{"type":"ADVISORY","url":"https://wordpress.org/plugins/aryo-activity-log/#developers"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/elementor/activity-log","events":[{"introduced":"0"},{"fixed":"1ad3ed7fb988bf649220ded591ce10b3ee6b391f"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"2.3.3"}],"source":"DESCRIPTION"}}],"versions":["2.3.2","2.3.1","2.2.12","2.2.11","2.2.10","2.2.9","2.2.8","2.2.7","2.2.6","2.2.5","2.2.4","2.2.3","2.2.2","2.2.1","2.2.0","2.1.16","2.1.15","2.1.14","2.1.13","2.1.12","2.1.11","2.1.10","2.1.9","2.1.8","2.1.7","2.1.6","2.1.5","2.1.4","v2.1.3","v2.1.2","v2.1.1","v2.1.4","v2.1.0","v2.0.7","v2.0.6","v2.0.5","v2.0.4","v2.0.3","v2.0.2","v2.0.0","v2.0.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-10891.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}