CVE · Medium
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2022-1005 | WP Statistics – Simple, privacy-friendly Google Analytics alternative [wp-statistics] < 13.2.2 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 13.2.2 | 13.2.2 | 2022-05-10 | — |
The WP Statistics plugin prior to version 13.2.2 contains a reflected cross-site scripting vulnerability where the REQUEST_URI parameter is output to the page without proper sanitization, potentially allowing attackers to inject malicious scripts that execute in browsers that do not automatically encode such characters.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.