VDB
BDU%3A2024-04813
BDU%3A2024-04813
PUBLISHED
CVSS 7.199999809265137 HIGH
Уязвимость плагина WP Statistics системы управления содержимым сайта WordPress, позволяющая нарушителю выполнить межсайтовый скриптинг XSS
Risk Scores
CVSS 3.1
7.199999809265137
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| WordPress Foundation | WP Statistics | |
| veronalabs | WP Statistics – Simple, privacy-friendly Google Analytics alternative | 0 |
Timeline
- Mar 13, 2024 CVE Published
- Jun 27, 2024 CVE Updated
References
- https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/wp-statistics/wp-statistics-145-unauthenticated-stored-cross-site-scripting url
- https://www.wordfence.com/threat-intel/vulnerabilities/id/e44e4bdd-d84e-4315-9232-48a3b240242d?source=cve url
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3047756%40wp-statistics&new=3047756%40wp-statistics&sfp_email=&sfph_mail= url