Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

TI-2017-01450 CVE-2017-2147 · GHSA-25rw-5w3f-v9vr

Cross-site scripting in WP Statistics

Priority LOW 30

Cross-site scripting vulnerability in WP Statistics version 12.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01278 Published 2017-04-28 No fix listed CWE-79
TI-2017-01438 CVE-2017-2135 · GHSA-p367-x79q-2576

Cross-site scripting in WP Statistics

Priority LOW 31

Cross-site scripting vulnerability in WP Statistics version 12.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01678 Published 2017-04-28 No fix listed CWE-79