CVE-2022-4310

Slimstat Analytics < 4.9.3 - Unauthenticated Stored XSS

Medium · published January 9, 2023

CVSS v3.1
6.1
EPSS
1%
Percentile
50.5
In the wild
Unconfirmed
What it is

The Slimstat Analytics WordPress plugin before 4.9.3 does not sanitise and escape the URI when logging requests, which could allow unauthenticated attackers to perform Stored Cross-Site Scripting attacks against logged in admin viewing the logs

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00648 · 50.5th percentile
Published
2023-01-09T22:13Z
EPSS history
Timeline
  • 09 JAN 22:13Z
    Slimstat Analytics < 4.9.3 - Unauthenticated Stored XSS
    cvelistv5