← CVE Intelligence

CVE-2022-4310

Slimstat Analytics < 4.9.3 - Unauthenticated Stored XSS PUBLISHED

Description (CNA)

The Slimstat Analytics WordPress plugin before 4.9.3 does not sanitise and escape the URI when logging requests, which could allow unauthenticated attackers to perform Stored Cross-Site Scripting attacks against logged in admin viewing the logs

Affected (CNA)

Vendor / productVersions
Unknown / Slimstat Analyticsaffected 0 before 4.9.3

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.