CVE-2022-4310

Slimstat Analytics < 4.9.3 - Unauthenticated Stored XSS

CVSS 6.1 MEDIUMEPSS 0.6%

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 6.1EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

09 jan 2023Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

The Slimstat Analytics WordPress plugin before 4.9.3 does not sanitise and escape the URI when logging requests, which could allow unauthenticated attackers to perform Stored Cross-Site Scripting attacks against logged in admin viewing the logs

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Produtos afetados

Unknown · Slimstat Analytics

Referências

https://wpscan.com/vulnerability/b1aef75d-0c84-4702-83fc-11f0e98a0821