CVE-2021-25086
Assigner: WPScan
Published: 2022-05-02T16:05:31
State: PUBLISHED
affected: product: Advanced Page Visit Counter – Advanced WordPress Visit Counter
vendor: Unknown
versions: lessThan: 6.1.2
status: affected
version: 6.1.2
versionType: custom
credits: value: Krzysztof Zając
descriptions: value: The Advanced Page Visit Counter WordPress plugin before 6.1.2 does not sanitise and escape some input before outputting it in an admin dashboard page, allowing unauthenticated attackers to perform Cross-Site Scripting attacks against admins viewing it
problemTypes: descriptions: cweId: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
type: CWE
source: discovery: EXTERNAL
title: Advanced Page Visit Counter < 6.1.2 - Unauthenticated Stored Cross-Site Scripting
x_generator: WPScan CVE Generator