← CVE Intelligence

CVE-2022-4656

WP Visitor Statistics (Real Time Traffic) < 6.5 - Contributor+ Stored XSS via Shortcode PUBLISHED

Description (CNA)

The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 6.5 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.

Affected (CNA)

Vendor / productVersions
Unknown / WP Visitor Statistics (Real Time Traffic)affected 0 before 6.5

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.