Read the docs

Web-stat

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Web-stat records in CISA KEV

No Web-stat vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Web-stat 1 record LOW

Records

1 record in Web-stat · all components

TI-2021-06459 CVE-2021-24167 · GHSA-r9fr-v6w6-3r8x

Web-Stat < 1.4.1 - API Key Disclosure

Priority LOW 36

When visiting a site running Web-Stat < 1.4.0, the "wts_web_stat_load_init" function used the visitor’s browser to send an XMLHttpRequest request to https://wts2.one/ajax.htm?action=lookup_WP_account.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01412 Published 2021-04-05 Fixed in 1.4.1 CWE-200
Open these records in search →