QwikSec

Security Database

CVE

CWE

Training

CVE-2022-27231

Published: Jun 13, 2022

Modified: Aug 3, 2024

PUBLISHED

Description

Cross-site scripting vulnerability exists in WP Statistics versions prior to 13.2.0 because it improperly processes a platform parameter. By exploiting this vulnerability, an arbitrary script may be executed on the web browser of the user who is logging in to the website using the product.

Vendor	Product	Versions
VeronaLabs	WP Statistics	affected `versions prior to 13.2.0`

References

https://wordpress.org/plugins/wp-statistics/

x_refsource_MISC

https://wordpress.org/plugins/wp-statistics/#developers

x_refsource_MISC

https://jvn.jp/en/jp/JVN15241647/index.html

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.