WordPress WP Statistics plugin cross-site scripting vulnerability (CNVD-2018-04482)

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL server set up a personal blog site.WP Statistics is one of the website statistical analysis plugin. A cross-site scripting vulnerability exists in...

WordPress WP Statistics Plugin Cross-Site Scripting Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress WP Statistics plugin. An attacker can exploit this vulnerability...

WordPress WP Statistics Plugin SQL Injection Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the WordPress WP Statistics plugin. An attacker can exploit the vulnerability to obta...

WordPress Statistics Plugin SQL Injection

An SQL injection vulnerability has been reported in WordPress Statistics Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

WordPress plugin "WP Statistics" vulnerable to cross-site scripting

Overview The WordPress plugin "WP Statistics" provided by WP Statistics contains a stored cross-site scripting vulnerability CWE-79. Note that this vulnerability is different from JVN62392065. Gen Sato of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC...

WordPress plugin "WP Statistics" vulnerable to cross-site scripting

Overview The WordPress plugin "WP Statistics" provided by WP Statistics contains a stored cross-site scripting vulnerability CWE-79 in multiple pages due to a flaw in processing HTTP Referer headers. Note that this vulnerability is different from JVN77253951. Gen Sato of Mitsui Bussan Secure...

WordPress plugin "WP Statistics" vulnerable to cross-site scripting

Overview The WordPress plugin "WP Statistics" provided by WP Statistics contains a reflected cross-site scripting vulnerability CWE-79. ASAI Ken reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An arbitrary...

WordPress WP Statistics Plugin Cross-Site Scripting Vulnerability

WordPress is a set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on servers with PHP and MySQL.WordPress WP Statistics is a wordpress based statistics plugin. WordPress WP Statistics suffers from a cross-site scripting vulnerability that...

WordPress WP Statistics Plugin <= 9.1.2 - Stored Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability because "above" parameter is vulnerable to cross site scripting. A malicious administration can hijack other users session, take control of another administrator's browser or install malware on their computer. Solution Update the plugin...

Automattic: Open Redirect in WordPress Feed Statistics {Affected All Versions}

Hi, Feed Statistics Plugin is vulnerable to Open Redirect and effecting large amount of Websites. Which is the reason it should be patched swiftly. Detail description is given below: Tested on: Wordpress 3.9.1 Vulnerable Plugin: Feed Statistics Plugin Link:...

Xlrstats 2.0.1 - SQL Injection Vulnerability

No description provided by source. ---------------------------------------------------------------------------- Sql injection vulnerability ---------------------------------------------------------------------------- Exploit Title: Xlrstats Big Brother Bot Game SQL injection 2.0.1...

StatPressCN vulnerability XSS cross-site get a user cookie-vulnerability warning-the black bar safety net

Description Before this article is put in the draft box for a long time, recently I want to clean up the blog's database, it is published out of it. statpresscn is a popular wordpress site statistics plug-in the Chinese version, although it has been a long time not updated, but wp official websit...

Will Bo CMS(JumboTCMS)_V6 code audit summary-vulnerability warning-the black bar safety net

Author: Seay Blog: http://seay.sinaapp.com/ I learn software testing Professional, the most recent school to prepare for this aspect of the course, so want to find a set ASP. NET open source CMS play, Baidu the next, saw the Bo CMS, popularity is also quite high, went to the official website to...

Persistent cross-site scripting in wordpress.com dashboard

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 1. DESCRIPTION OF THE SOFTWARE On May 6th, 2007 a new WordPress plugin called "stats" was released. This plugin allows a WordPress user who has his blog self-hosted to use the Wordpress.com statistics. The plugin includes a JavaScript on the blog page...