← volver
CVE-2022-1005

WP Statistics < 13.2.2 - Reflected Cross-Site Scripting

EPSS 0.9%CWE-79
The WP Statistics WordPress plugin before 13.2.2 does not sanitise the REQUEST_URI parameter before outputting it back in the rendered page, leading to Cross-Site Scripting (XSS) in web browsers which do not encode characters
Productos afectados
Unknown · WP Statistics

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →