CVE-2011-4750
SmarterStats 6.2.4100 - Cross-Site Scripting via Default.aspx
Title source: llmDescription
Multiple cross-site scripting (XSS) vulnerabilities in SmarterTools SmarterStats 6.2.4100 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script, as demonstrated by Default.aspx and certain other files.
References (1)
Core 1
Core References
Various Sources x_refsource_misc
http://xss.cx/examples/exploits/stored-reflected-xss-cwe79-smarterstats624100.html
Scores
EPSS
0.0093
EPSS Percentile
56.8%
Details
CWE
CWE-79
Status
published
Products (1)
smartertools/smarterstats
6.2.4100
Published
Dec 16, 2011
Tracked Since
Feb 18, 2026