The WP Statistics WordPress plugin before 13.2.2 does not sanitise the REQUEST_URI parameter before outputting it back in the rendered page, leading to Cross-Site Scripting (XSS) in web browsers which do not encode characters
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: WPScan

Published: 2022-06-06T08:50:53

Updated: 2024-08-02T23:47:42.970Z

Reserved: 2022-03-17T00:00:00

Link: CVE-2022-1005

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-06-08T10:15:09.237

Modified: 2024-11-21T06:39:50.557

Link: CVE-2022-1005

cve-icon Redhat

No data.