CVE-2024-1894

CVE-2024-1894 affects Burst Statistics – Privacy-Friendly Analytics for WordPress (WordPress plugin) up to version 1.5.6.1. It is a Stored XSS via the burst_total_pageviews_count custom meta field due to insufficient input sanitization/output escaping. Exploitation requires an attacker with contr...

WordPress Burst Statistics Plugin <= 1.5.6.1 is vulnerable to Cross Site Scripting (XSS)

Software Burst Statistics Type Plugin Vulnerable versions = 1.5.6.1 Fixed in 1.5.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1894 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID ddeadfac1606 Credits Webbernaut Required...