Lucene search
WpvulndbWPVDB-ID:79D11708-7664-4AA4-A0D7-7FB1D99E3332HistoryMay 21, 2019 - 12:00 a.m.
WP Slimstat <= 4.8 - Unauthenticated Stored XSS from Visitors
2019-05-2100:00:00
wpscan.com
10
0.001 Low
EPSS
Percentile
36.3%
This vulnerability allows a visitor to inject arbitrary JavasScript code on the plugin access log functionality, which is visible both on the plugin’s access log page and on the admin dashboard index—‚ the default page shown once you log in.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp-slimstat | lt | 4.8.1 |
Related
osv
osv
CVE-2019-15112
2019-08-21 13:15:12
cvelist
cvelist
CVE-2019-15112
2019-08-21 12:37:36
openvas
openvas
WordPress Slimstat Analytics Plugin < 4.8.1 XSS Vulnerability
2019-09-16 00:00:00
nvd
nvd
CVE-2019-15112
2019-08-21 13:15:12
cve
cve
CVE-2019-15112
2019-08-21 13:15:12
prion
prion
Cross site scripting
2019-08-21 13:15:00