CVE-2017-20094

LOW

NewStatPress Plugin 1.2.4 - Stored Cross-Site Scripting

Title source: llm

Description

A vulnerability, which was classified as problematic, has been found in NewStatPress Plugin 1.2.4. This issue affects some unknown processing. The manipulation leads to basic cross site scripting (Persistent). The attack may be initiated remotely. Upgrading to version 1.2.5 is able to address this issue. It is recommended to upgrade the affected component.

References (2)

Core 2

Core References

Exploit, Mailing List, Patch, Third Party Advisory x_refsource_misc

http://seclists.org/fulldisclosure/2017/Feb/81

Third Party Advisory x_refsource_misc

https://vuldb.com/?id.97373

Scores

CVSS v3 3.5

EPSS 0.0050

EPSS Percentile 38.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-80 CWE-79

Status published

Products (1)

newstatpress_project/newstatpress 1.2.4

Published Jun 24, 2022

Tracked Since Feb 18, 2026