PT-2022-7967 · WordPress · Newstatpress Plugin

Han Sahin · Published 2022-06-24 · Updated 2022-06-30 · CVE-2017-20094

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions NewStatPress Plugin version 1.2.4

Description A problematic issue has been found in the NewStatPress Plugin, affecting some unknown processing. The manipulation leads to basic cross site scripting (Persistent). The attack may be initiated remotely.

Recommendations For NewStatPress Plugin version 1.2.4, upgrade to version 1.2.5 to address this issue.

Exploit

Fix

XSS

Weakness Enumeration

CWE-80

CWE-79

Related Identifiers

CVE-2017-20094

Affected Products

Newstatpress Plugin

References · 5

• 🔥 http://seclists.org/fulldisclosure/2017/Feb/81 · Exploit
• https://osv.dev/vulnerability/CVE-2017-20094 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-20094 · Security Note
• https://t.me/cvenotify/32100 · Telegram Post
• https://vuldb.com/?id.97373 · Note