Lucene search
Muhammad Zeeshan (Xib3rR4dAr)PATCHSTACK:21A2BCACA4E493EFE53FEFF65BBB3C40HistoryFeb 17, 2022 - 12:00 a.m.
WordPress WP Statistics plugin <= 13.1.5 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability
2022-02-1700:00:00
Muhammad Zeeshan (Xib3rR4dAr)
patchstack.com
12
0.002 Low
EPSS
Percentile
52.7%
Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability via ‘platform’ discovered by Muhammad Zeeshan (Xib3rR4dAr) in WordPress WP Statistics plugin (versions <= 13.1.5).
Solution
Update the WordPress WP Statistics plugin to the latest available version (at least 13.1.6).
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp statistics | le | 13.1.5 |
Related
cnvd
cnvd
WordPress and WordPress plugin cross-site scripting vulnerability
2022-02-25 00:00:00
prion
prion
Cross site scripting
2022-02-24 19:15:00
nvd
nvd
CVE-2022-25307
2022-02-24 19:15:10
cve
cve
CVE-2022-25307
2022-02-24 19:15:10
cvelist
cvelist
wpvulndb
wpvulndb
openvas
openvas
WordPress WP Statistics Plugin < 13.1.6 Multiple Vulnerabilities
2022-03-08 00:00:00