medium6.1
CVE-2022-4310
The Slimstat Analytics WordPress plugin before 4.9.3 does not sanitise and escape the URI when logging requests, which could allow unauthenticated attackers to…
Impact
The Slimstat Analytics WordPress plugin before 4.9.3 does not sanitise and escape the URI when logging requests, which could allow unauthenticated attackers to perform Stored Cross-Site Scripting attacks against logged in admin viewing the logs
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wp-Slimstat | Slimstat Analytics | before 4.9.3 |