Skip to content
Sign in
6.1 Medium

CVE-2022-4310 The Slimstat Analytics WordPress plugin before 4.9.3 does not sanitise and escape the URI when logging requests, which…

Description

The Slimstat Analytics WordPress plugin before 4.9.3 does not sanitise and escape the URI when logging requests, which could allow unauthenticated attackers to perform Stored Cross-Site Scripting attacks against logged in admin viewing the logs

Affected products and versions

Product Affected versions Fixed in
Slimstat Analytics 4.9 earliest → < 4.9.3 4.9.3

Other CVEs of Slimstat Analytics

The 3 CVEs of Slimstat Analytics →
CVE-2026-12592 The SlimStat Analytics WordPress plugin before 5.5.0 does not escape a visitor-controlled geolocation value before… 7.5 High CVE-2023-0630 The Slimstat Analytics WordPress plugin before 4.9.3.3 does not prevent subscribers from rendering shortcodes that… Not rated
Track this CVE