WordPress wp-slimstat plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wp-slimstat is a website monitoring plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

CVE-2019-15112

The wp-slimstat plugin before 4.8.1 for WordPress has XSS...

CVE-2019-15112

The wp-slimstat plugin before 4.8.1 for WordPress has XSS...

Cross site scripting

The wp-slimstat plugin before 4.8.1 for WordPress has XSS...

CVE-2019-15112

The CVE-2019-15112 entry describes a cross-site scripting (XSS) vulnerability in the WordPress wp-slimstat plugin before version 4.8.1. Public sources (e.g., PT-2019-13992, NVD, CNVD, RH) confirm the flaw and consistently recommend updating to 4.8.1 or later. The issue is attributed to inadequate...

CVE-2019-15112

The wp-slimstat plugin before 4.8.1 for WordPress has XSS...

PT-2019-13992 · WordPress · Wp Slimstat

Name of the Vulnerable Software and Affected Versions: wp-slimstat plugin versions prior to 4.8.1 Description: The issue is related to a cross-site scripting XSS problem. Recommendations: For versions prior to 4.8.1, update to version 4.8.1 or later to resolve the issue...

CVE-2019-15112: Improper Neutralization of Input During Web Page Generation

The wp-slimstat plugin before 4.8.1 for WordPress has XSS...

WordPress Slimstat Analytics plugin <= 4.8.3 - Cross-Site Request Forgery (CSRF) to Stored Cross-Site Scripting (XSS) + Setting Updates vulnerabilities

Cross-Site Request Forgery CSRF to Stored Cross-Site Scripting XSS + Setting Updates vulnerabilities found in WordPress Slimstat Analytics plugin versions = 4.8.3. Solution Update the WordPress Slimstat Analytics plugin to the latest available version at least 4.8.4...

WP Slimstat <= 4.8.3 - CSRF to Stored XSS and Setting Updates

Lack of CSRF check and sanitisation in the updatesettings function can lead to settings update, as well as Stored XSS issues /wp-admin/admin.php?page=slimconfig&tab=1" method="POST" ' /...

WordPress Slimstat Plugin Cross-Site Scripting

A Cross-Site Scripting vulnerability exists in WordPress Slimstat server. Successful exploitation of this vulnerability could allow remote attackers to inject arbitrary web script into the affected system...

WordPress Slimstat plugin <= 4.8 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

Unauthenticated Stored Cross-Site Scripting XSS vulnerability found by Antony Garand in WordPress Slimstat plugin versions = 4.8. Solution Update the WordPress Slimstat plugin to the latest available version at least 4.8.1...

CVE-2015-9273

The wp-slimstat aka Slimstat Analytics plugin before 4.1.6.1 for WordPress has XSS via an HTTP Referer header, or via a field associated with JavaScript-based Referer tracking...

CVE-2015-9273

CVE-2015-9273 affects the WordPress plugin wp-slimstat (Slimstat Analytics) , with an XSS vulnerability exploitable via an HTTP Referer header or a related JavaScript Referer tracking field. Affected versions are prior to 4.1.6.1 . The issue is documented across multiple sources confirming a stor...

CVE-2015-9273

The wp-slimstat aka Slimstat Analytics plugin before 4.1.6.1 for WordPress has XSS via an HTTP Referer header, or via a field associated with JavaScript-based Referer tracking...

CVE-2015-9273: Improper Neutralization of Input During Web Page Generation

The wp-slimstat aka Slimstat Analytics plugin before 4.1.6.1 for WordPress has XSS via an HTTP Referer header, or via a field associated with JavaScript-based Referer tracking...

PT-2018-4582

Name of the Vulnerable Software and Affected Versions wp-slimstat aka Slimstat Analytics versions prior to 4.1.6.1 Description The issue allows for XSS attacks through either an HTTP Referer header or a field associated with JavaScript-based Referer tracking. Recommendations For versions prior to...

Slimstat Analytics Plugin for WordPress < 4.7.1 PHP Object Injection

According to its self-reported version, the Slimstat Analytics Plugin for WordPress running on the remote web server is prior to 4.7.1. It is, therefore, affected by a PHP object injection vulnerability. An authenticated, remote attacker can exploit this issue to inject PHP objects and execute...

WP SlimStat <= 3.5.5 - Overview URI Stored XSS

The Slimstat Analytics WordPress plugin was affected by an Overview URI Stored XSS security vulnerability...

WordPress WP Slimstat 'wp-slimstat.php' plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.WP SlimStat is one of the real-time statistical analysis plugin. A cross-site scripting vulnerability exists in the...