CVE-2007-3288

Cross-site scripting XSS vulnerability in the skeltoac stats Automattic Stats 1.0 plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer field...

CVE-2007-3288

The CVE-2007-3288 vulnerability affects the WordPress plugin Automattic Stats (skeltoac stats) version 1.0, where an XSS flaw allows remote attackers to inject arbitrary script or HTML via the HTTP Referer field. This is caused by insufficient input/output handling in the plugin, enabling cross-s...