3 matches found
CVE-2016-10919
The wassup plugin before 1.9.1 for WordPress has XSS via the Top stats widget or the wassupURI::addsiteurl method, a different vulnerability than CVE-2012-2633...
6.1CVSS5.8AI score0.00923EPSS
SaveExploits0References1
CVE-2016-10919
The vulnerability CVE-2016-10919 affects the WordPress WassUp Real Time Analytics plugin (versions before 1.9.1). It allows stored or reflected XSS via the Top stats widget or the wassupURI::add_siteurl method, enabling an attacker to inject arbitrary script when the affected plugin renders conte...
6.1CVSS6AI score0.00923EPSS
SaveExploits0References1Affected Software1
20