Unrated

Slimstat Analytics < 4.9.3 - Unauthenticated Stored XSS

CVE-2022-4310 First seen on SecPulse Jan 10, 2023

Original description The description as published by the source.

The Slimstat Analytics WordPress plugin before 4.9.3 does not sanitise and escape the URI when logging requests, which could allow unauthenticated attackers to perform Stored Cross-Site Scripting attacks against logged in admin viewing the logs

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
report wpscan.com
web wordpress.org

Key facts

Severity: Unrated
Published: Jan 10, 2023
First seen on SecPulse: Jan 10, 2023

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:01