CVE-2022-27231: XSS
Cross-site scripting vulnerability exists in WP Statistics versions prior to 13.2.0 because it improperly processes a platform parameter. By exploiting this vulnerability, an arbitrary script may be executed on the web browser of the user who is logging in to the website using the product.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-27231?
CVE-2022-27231 is a cross-site scripting vulnerability that exists in WP Statistics versions prior to 13.2.0.
How does CVE-2022-27231 work?
CVE-2022-27231 allows an attacker to execute arbitrary scripts on the web browser of a user who is logging in to a website using the WP Statistics plugin.
What is the severity of CVE-2022-27231?
CVE-2022-27231 has a severity rating of medium (6.1).
How can I check if my site is affected by CVE-2022-27231?
You can check if your site is affected by CVE-2022-27231 by verifying the version of WP Statistics installed on your WordPress site. If it is prior to 13.2.0, your site may be vulnerable.
How do I fix CVE-2022-27231?
To fix CVE-2022-27231, update the WP Statistics plugin to version 13.2.0 or later.