Lucene search
PRIOn knowledge basePRION:CVE-2022-25307HistoryFeb 24, 2022 - 7:15 p.m.
Cross site scripting
2022-02-2419:15:00
PRIOn knowledge base
www.prio-n.com
6
0.002 Low
EPSS
Percentile
52.7%
The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the platform parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers to inject arbitrary web scripts onto several pages that execute when site administrators view a sites statistics, in versions up to and including 13.1.5.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp_statistics | le | 13.1.5 |
Related
patchstack
patchstack
cnvd
cnvd
WordPress and WordPress plugin cross-site scripting vulnerability
2022-02-25 00:00:00
cve
cve
CVE-2022-25307
2022-02-24 19:15:10
cvelist
cvelist
nvd
nvd
CVE-2022-25307
2022-02-24 19:15:10
wpvulndb
wpvulndb
openvas
openvas
WordPress WP Statistics Plugin < 13.1.6 Multiple Vulnerabilities
2022-03-08 00:00:00