Description
WordPress Plugin Automattic Stats is prone to an HTML injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to execute HTML and script code in the context of the affected site, to steal cookie-based authentication credentials, or to control how the site is rendered to the user; other attacks are also possible. WordPress Plugin Automattic Stats version 1.0 is vulnerable; other versions may also be affected.
Remediation
Update to the latest version
References
Related Vulnerabilities
Internet Information Services Other Vulnerability (CVE-2011-5279)
XWiki Incorrect Authorization Vulnerability (CVE-2023-50732)
WordPress Plugin Ultimate Addons for Beaver Builder Security Bypass (1.24.0)
WordPress Plugin FV Flowplayer Video Player SQL Injection (7.5.46.7212)
WordPress Plugin Advertisement Management Multiple Vulnerabilities (1.0)