CVE-2022-40311

🗓️ 21 Oct 2022 15:32:11Reported by PatchstackType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 57 Views

Auth. Stored XSS in Fatcat Apps Analytics Cat plugin

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2022-40311	21 Oct 202220:22	–	circl
CNNVD	WordPress Plugin Fatcat Apps Analytics Cat 跨站脚本漏洞	21 Oct 202200:00	–	cnnvd
Cvelist	CVE-2022-40311 WordPress Analytics Cat plugin <= 1.0.9 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability	21 Oct 202215:32	–	cvelist
EUVD	EUVD-2022-43606	3 Oct 202520:07	–	euvd
NVD	CVE-2022-40311	21 Oct 202216:15	–	nvd
OSV	CVE-2022-40311	21 Oct 202216:15	–	osv
Patchstack	WordPress Analytics Cat plugin <= 1.0.9 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability	29 Sep 202200:00	–	patchstack
Prion	Cross site scripting	21 Oct 202216:15	–	prion
Vulnrichment	CVE-2022-40311 WordPress Analytics Cat plugin <= 1.0.9 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability	21 Oct 202215:32	–	vulnrichment
WPVulnDB	Analytics Cat < 1.1.0 - Admin+ Stored Cross-Site Scripting	29 Sep 202200:00	–	wpvulndb

NVD

Vulners

Node

fatcatapps analytics_catRange≤1.0.9wordpress

[
  {
    "product": "Analytics Cat – Google Analytics Made Easy (WordPress plugin)",
    "vendor": "Fatcat Apps",
    "versions": [
      {
        "lessThanOrEqual": "1.0.9",
        "status": "affected",
        "version": "<= 1.0.9",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
patchstack	www.patchstack.com/database/vulnerability/analytics-cat/wordpress-analytics-cat-plugin-1-0-9-authenticated-stored-cross-site-scripting-xss-vulnerability
wordpress	www.wordpress.org/plugins/analytics-cat/

28 Apr 2026 16:07Current

4.9Medium risk

Vulners AI Score4.9

CVSS 3.14.8

EPSS0.00314

SSVC

CWE-79