CVE-2022-1005: WP Statistics < 13.2.2 - Reflected Cross-Site Scripting
Published Jun 6, 2022
·Updated
The WP Statistics WordPress plugin before 13.2.2 does not sanitise the REQUESTURI parameter before outputting it back in the rendered page, leading to Cross-Site Scripting (XSS) in web browsers which do not encode characters
Affected Software
1 affected component
VeronaLabs Wp Statistics Wordpress<13.2.2
Event History
Jun 6, 2022
CVE Published
via MITRE·08:50 AM
Data Sourced
via MITRE·08:50 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-1005?
The severity of CVE-2022-1005 is classified as high due to its potential to allow Cross-Site Scripting (XSS).
2
How do I fix CVE-2022-1005?
To fix CVE-2022-1005, update the WP Statistics plugin to version 13.2.2 or later. {
3
What software is affected by CVE-2022-1005?
CVE-2022-1005 affects the WP Statistics WordPress plugin versions before 13.2.2.
4
What type of vulnerability is CVE-2022-1005?
CVE-2022-1005 is a Cross-Site Scripting (XSS) vulnerability that can impact web browsers not encoding characters.