CVE-2022-4310 Slimstat Analytics < 4.9.3 - Unauthenticated Stored XSS

The Slimstat Analytics WordPress plugin before 4.9.3 does not sanitise and escape the URI when logging requests, which could allow unauthenticated attackers to perform Stored Cross-Site Scripting attacks against logged in admin viewing the logs...

CVE-2022-4310

CVE-2022-4310 concerns the Slimstat Analytics WordPress plugin before 4.9.3. The issue is failure to sanitise/escape the URI when logging requests, allowing unauthenticated attackers to perform Stored XSS against logged-in admins viewing the logs. Documents cite a CVSSv3.1 base score of 6.1 (Medi...

CVE-2022-4310 Slimstat Analytics < 4.9.3 - Unauthenticated Stored XSS

The Slimstat Analytics WordPress plugin before 4.9.3 does not sanitise and escape the URI when logging requests, which could allow unauthenticated attackers to perform Stored Cross-Site Scripting attacks against logged in admin viewing the logs...

CVE-2022-4310 Slimstat Analytics < 4.9.3 - Unauthenticated Stored XSS

The Slimstat Analytics WordPress plugin before 4.9.3 does not sanitise and escape the URI when logging requests, which could allow unauthenticated attackers to perform Stored Cross-Site Scripting attacks against logged in admin viewing the logs...

PT-2023-14176 · WordPress · Slimstat Analytics

Name of the Vulnerable Software and Affected Versions: Slimstat Analytics WordPress plugin versions prior to 4.9.3 Description: The issue allows unauthenticated attackers to perform Stored Cross-Site Scripting attacks against logged-in admins viewing the logs, due to the plugin's failure to...

WordPress Plugin Slimstat Analytics 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

Slimstat Analytics Plugin for WordPress < 3.9.2 Cross-site Scripting

The WordPress Slimstat Analytics Plugin installed on the remote host is affected by a Cross-site Scripting. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...

Slimstat Analytics < 4.9.3 - Unauthenticated Stored XSS

The plugin does not sanitise and escape the URI when logging requests, which could allow unauthenticated attackers to perform Stored Cross-Site Scripting attacks against logged in admin viewing the logs PoC As an unauthenticated user, open the following URL https://example.com/?s=" The XSS will b...

Slimstat Analytics < 4.9.3 - Unauthenticated Stored XSS

The plugin does not sanitise and escape the URI when logging requests, which could allow unauthenticated attackers to perform Stored Cross-Site Scripting attacks against logged in admin viewing the logs As an unauthenticated user, open the following URL https://example.com/?s="alert/XSS/ The XSS...

WordPress Slimstat Analytics Plugin < 4.8.1 XSS Vulnerability

The WordPress plugin Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...

WordPress wp-slimstat plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wp-slimstat is a website monitoring plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

CVE-2019-15112

The wp-slimstat plugin before 4.8.1 for WordPress has XSS...

CVE-2019-15112

The wp-slimstat plugin before 4.8.1 for WordPress has XSS...

Cross site scripting

The wp-slimstat plugin before 4.8.1 for WordPress has XSS...

CVE-2019-15112

The wp-slimstat plugin before 4.8.1 for WordPress has XSS...

CVE-2019-15112

The CVE-2019-15112 entry describes a cross-site scripting (XSS) vulnerability in the WordPress wp-slimstat plugin before version 4.8.1. Public sources (e.g., PT-2019-13992, NVD, CNVD, RH) confirm the flaw and consistently recommend updating to 4.8.1 or later. The issue is attributed to inadequate...

PT-2019-13992 · WordPress · Wp Slimstat

Name of the Vulnerable Software and Affected Versions: wp-slimstat plugin versions prior to 4.8.1 Description: The issue is related to a cross-site scripting XSS problem. Recommendations: For versions prior to 4.8.1, update to version 4.8.1 or later to resolve the issue...

WordPress Slimstat Analytics plugin <= 4.8.3 - Cross-Site Request Forgery (CSRF) to Stored Cross-Site Scripting (XSS) + Setting Updates vulnerabilities

Cross-Site Request Forgery CSRF to Stored Cross-Site Scripting XSS + Setting Updates vulnerabilities found in WordPress Slimstat Analytics plugin versions = 4.8.3. Solution Update the WordPress Slimstat Analytics plugin to the latest available version at least 4.8.4...

WP Slimstat <= 4.8.3 - CSRF to Stored XSS and Setting Updates

Lack of CSRF check and sanitisation in the updatesettings function can lead to settings update, as well as Stored XSS issues /wp-admin/admin.php?page=slimconfig&tab=1" method="POST" ' /...

WordPress Slimstat Plugin Cross-Site Scripting

A Cross-Site Scripting vulnerability exists in WordPress Slimstat server. Successful exploitation of this vulnerability could allow remote attackers to inject arbitrary web script into the affected system...