The Slimstat Analytics WordPress plugin before 4.9.3 does not sanitise and escape the URI when logging requests, which could allow unauthenticated attackers to perform Stored Cross-Site Scripting attacks against logged in admin viewing the logs
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: WPScan

Published: 2023-01-09T22:13:26.488Z

Updated: 2024-08-03T01:34:50.117Z

Reserved: 2022-12-06T15:29:32.980Z

Link: CVE-2022-4310

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-01-09T23:15:27.573

Modified: 2024-11-21T07:34:59.600

Link: CVE-2022-4310

cve-icon Redhat

No data.