0.001 Low
EPSS
Percentile
43.6%
The NewStatPress WordPress plugin before 1.3.6 does not properly escape the whatX parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues
wpscan.com/vulnerability/ce12437a-d440-4c4a-9247-95a8f39d00b9