Lucene search

K
patchstackBeni_VandaPATCHSTACK:4EBCE319EF80B3DAFD5A2118EDDABC34
HistoryApr 09, 2013 - 12:00 a.m.

WordPress Traffic Analyzer Plugin - Cross Site Scripting

2013-04-0900:00:00
Beni_Vanda
patchstack.com
5

0.005 Low

EPSS

Percentile

76.8%

WordPress Traffic Analyzer plugin’s “aoid” parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal cookie-based authentication credentials. Other attacks are also possible.

Solution

           Update the plugin. 
CPENameOperatorVersion
traffic analyzerle1.0

0.005 Low

EPSS

Percentile

76.8%

Related for PATCHSTACK:4EBCE319EF80B3DAFD5A2118EDDABC34