CVE-2017-20099CWE-94

Analytics Stats Counter Statistics Plugin code injection

High · published June 27, 2022

CVSS v3.1
7.3
EPSS
1%
Percentile
67.1
In the wild
Unconfirmed
What it is

A vulnerability was found in Analytics Stats Counter Statistics Plugin 1.2.2.5 and classified as critical. This issue affects some unknown processing. The manipulation leads to code injection. The attack may be initiated remotely.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.01174 · 67.1th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2022-06-27T18:11Z
EPSS history
Timeline
  • 27 JUN 18:11Z
    Analytics Stats Counter Statistics Plugin code injection
    cvelistv5