Statpresscn Vulnerabilities

The StatPressCN plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 1.9.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully...

CVSS:

6.1

Affected:

up to 1.9.1

Fix:

No patched version reported

Disclosed:

Jan 16, 2025

CVE-2025-23544 on NVD →

Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/admin.php in the StatPressCN plugin 1.9.0 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) what1, (2) what2, (3) what3, (4) what4, and (5) what5 parameters. NOTE: the provenance of this information is unknown; the det...

CVSS:

6.1

Affected:

up to 1.9.0

Fixed in:

1.9.1

Disclosed:

Jan 21, 2011

CVE-2011-0641 on NVD →