CVE-2014-100027 - Cross-site scripting (XSS) vulnerability in the WP SlimStat plugin before 3.5.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via a crafted URL

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in the WP SlimStat plugin before 3.5.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via a crafted URL

Published Jan 13, 2015

4.3

MEDIUM

CVSS 2.0

EPSS 2.02%

Description

Cross-site scripting (XSS) vulnerability in the WP SlimStat plugin before 3.5.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (5)

http://secunia.com/advisories/57305
third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/66146
vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-1058
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/91840
vdb-entryx_refsource_XF
https://github.com/getusedtoit/wp-slimstat/issues/3
x_refsource_CONFIRMExploit

Link	Providers	Tags
http://secunia.com/advisories/57305		third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/66146		vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-1058		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/91840		vdb-entryx_refsource_XF
https://github.com/getusedtoit/wp-slimstat/issues/3		x_refsource_CONFIRMExploit