Aller au contenu
Se connecter
6.1 Moyenne

CVE-2022-4310 The Slimstat Analytics WordPress plugin before 4.9.3 does not sanitise and escape the URI when logging requests, which…

Description

The Slimstat Analytics WordPress plugin before 4.9.3 does not sanitise and escape the URI when logging requests, which could allow unauthenticated attackers to perform Stored Cross-Site Scripting attacks against logged in admin viewing the logs

Produits et versions touchés

Produit Versions touchées Corrigé en
Slimstat Analytics 4.9 premières → < 4.9.3 4.9.3

Autres CVE de Slimstat Analytics

Les 3 CVE de Slimstat Analytics →
CVE-2026-12592 The SlimStat Analytics WordPress plugin before 5.5.0 does not escape a visitor-controlled geolocation value before… 7.5 Élevée CVE-2023-0630 The Slimstat Analytics WordPress plugin before 4.9.3.3 does not prevent subscribers from rendering shortcodes that… Non notée
Suivre cette CVE