CVE-2022-2887
WP Server Health Stats < 1.7.0 - Admin+ Stored Cross-Site Scripting
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The WP Server Health Stats WordPress plugin before 1.7.0 does not escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
| CWE | CWE-79 |
| Vendor | unknown |
| Product | wp server health stats |
| Published | Sep 16, 2022 |
| Last Updated | Aug 3, 2024 |
Stay Ahead of the Next One
Get instant alerts for unknown wp server health stats
Be the first to know when new unknown vulnerabilities affecting unknown wp server health stats are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / WP Server Health Stats
1.7.0 < 1.7.0
References
Credits
Mika