Pimpmylog vulnerabilities
We track 1 vulnerability in Pimpmylog products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on December 16, 2025.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Pimpmylog vulnerabilities
- 9.8 Critical severity
PimpMyLog: Improper Authorization
PimpMyLog 1.7.14 contains an improper access control vulnerability that allows remote attackers to create admin accounts without authorization through the configuration endpoint. Attackers can exploit the unsanitized username field to inject malicious JavaScri