Threats tagged 'ghsa-cxcf-8j7q-jhx6'

1 threat

Threats tagged 'ghsa-cxcf-8j7q-jhx6'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.1	EPSS 0.3%	CVE-2026-97652WP Statistics – Simple, privacy-friendly Google Analytics alternative · Cross-site Scripting Medium6.1EPSS 0.3%2026-10-02CVE Database V5CVE-2026-97652 WP Statistics plugin for WordPress versions up to and including 14.16.14 is vulnerable to reflected Cross-Site Scripting (XSS) via the REQUEST_URI query-parameter key. This vulnerability arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary scripts that execute when a user clicks a crafted link. EPSS 0.3%Vulnerability veronalabs #cwe-79 #ghsa-cxcf-8j7q-jhx6	CVE Database V5	2026-10-02

Showing 1–1 of 1 result