CVE-2022-1005CWE-79

CVE-2022-1005: falha em WP Statistics

WP Statistics < 13.2.2 - Reflected Cross-Site Scripting

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar WP Statistics

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.9%
The WP Statistics WordPress plugin before 13.2.2 does not sanitise the REQUEST_URI parameter before outputting it back in the rendered page, leading to Cross-Site Scripting (XSS) in web browsers which do not encode characters
Produtos afetados
Unknown · WP Statistics
CVEs relacionadas — WP Statistics

No mesmo produto, das mais perigosas para as menos.

CVE-2022-4230HIGHWP Statistics < 13.2.9 - Authenticated SQLiEPSS 35.7%CVE-2023-0955HIGHWP Statistics < 14.0 - Authenticated SQLiEPSS 0.9%CVE-2026-16562MEDIUMWP Statistics < 14.16.10 - Subscriber+ Sensitive Data Disclosure via Metabox AJAX HandlersEPSS 0.4%