CVE · Medium
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2022-25307 | WP Statistics – Simple, privacy-friendly Google Analytics alternative [wp-statistics] < 13.1.6 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 13.1.6 | 13.1.6 | 2022-02-17 | — |
The WP Statistics plugin through version 13.1.5 contains a cross-site scripting vulnerability in the platform parameter within the hits tracking functionality, where improper escaping and sanitization allows attackers to inject malicious scripts that execute in the browsers of administrators viewing site statistics pages.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.