Medium severity6.1NVD Advisory· Published Apr 28, 2017· Updated May 13, 2026
CVE-2017-2135
CVE-2017-2135
Description
Cross-site scripting vulnerability in WP Statistics version 12.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
2- cpe:2.3:a:wp-statistics:wp_statistics:*:*:*:*:*:wordpress:*:*Range: <=12.0.1
- WP Statistics/WP Statisticsv5Range: version 12.0.1 and earlier
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- jvn.jp/en/jp/JVN17633442/index.htmlnvdThird Party AdvisoryVDB Entry
- www.securityfocus.com/bid/98610nvdThird Party AdvisoryVDB Entry
- wp-statistics.com/change-log/nvdRelease NotesVendor Advisory
News mentions
0No linked articles in our index yet.