VulnCheck KEV: CVE-2024-2194

The WP Statistics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the URL search parameter in all versions up to, and including, 14.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2024-2194: Improper Neutralization of Input During Web Page Generation

The WP Statistics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the URL search parameter in all versions up to, and including, 14.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

PT-2024-4325

Name of the Vulnerable Software and Affected Versions WP Statistics plugin for WordPress versions up to, and including, 14.5 Description The issue exists due to insufficient input sanitization and output escaping, allowing an attacker to inject arbitrary web scripts in pages. This can lead to...

CVE-2023-4343: Undefined Security Weakness

Broadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a URL search parameter...