TI-2017-01439 CVE-2017-2136 · GHSA-9mcw-hh47-x3v4Cross-site scripting in WP StatisticsPriority LOW 32Cross-site scripting vulnerability in WP Statistics version 12.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via specially crafted HTTP Referer headers.CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.02603 · Published 2017-04-28 · No fix listed CWE-79