Non évaluée

Slimstat Analytics < 4.9.3 - Unauthenticated Stored XSS

CVE-2022-4310 Première détection SecPulse Jan 10, 2023

Description d'origine La description telle que publiée par la source (souvent en anglais).

The Slimstat Analytics WordPress plugin before 4.9.3 does not sanitise and escape the URI when logging requests, which could allow unauthenticated attackers to perform Stored Cross-Site Scripting attacks against logged in admin viewing the logs

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory github.com
advisory nvd.nist.gov
report wpscan.com
web wordpress.org

Faits clés

Gravité: Non évaluée
Publication: Jan 10, 2023
Première détection SecPulse: Jan 10, 2023

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:01