EUVD-2022-15408

Malicious code in bioql PyPI...

The vulnerability of the NewStatPress plugin of the WordPress content management system, related to the lack of protective measures for website structures, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the NewStatPress plugin of the WordPress content management system is related to the lack of measures taken to protect the website structure when processing the whatX parameters. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

CVE-2022-0206

The NewStatPress WordPress plugin before 1.3.6 does not properly escape the whatX parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues...