Pimpmylog vulnerabilities

Products

• PimpMyLog 1

Latest Pimpmylog CVEs

Newest publication first

1. CVE-2023-53895 PimpMyLog 1.7.14 Improper Access Control via Account Creation Endpoint

   Published 2025-12-16

   Critical·CVSS 9.3 EPSS 0.67%

   PimpMyLog 1.7.14 contains an improper access control vulnerability that allows remote attackers to create admin accounts without authorization through the configuration endpoint. Attackers can exploit the unsanitized username field to inject malicious JavaScript, create a hidden...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.