Threats tagged 'ghsa-rp39-7w2q-w3x5'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.2	CVE-2026-111370The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via High7.22026-11-07GCVE DatabaseCVE-2026-111370 The WP Visitor Statistics (Real Time Traffic) plugin for WordPress up to version 8.9.0 is vulnerable to a stored cross-site scripting (XSS) flaw. This vulnerability arises from insufficient input sanitization and output escaping of the 'os' parameter (and related parameters 'browser' and 'res'). An unauthenticated attacker can inject malicious scripts that execute when a user views the affected page. Report on CVE-2026-111370 Vulnerability CWE-79 #ghsa-rp39-7w2q-w3x5	GCVE Database	2026-11-07

Page 1 of 1