CVEDB API

Authenticated (admin or higher user role) Stored Cross-Site Scripting (XSS) in PlausibleHQ Plausible Analytics (WordPress plugin) <= 1.2.2

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 65.9%

CVSS Severity

CVSS v3 Score 4.8

CVSS v2 Score 3.5

References

Products affected by CVE-2022-27845

Plausible » Plausible Analytics » Version: N/A

cpe:2.3:a:plausible:plausible_analytics:-
Plausible » Plausible Analytics » Version: 1.0.0

cpe:2.3:a:plausible:plausible_analytics:1.0.0
Plausible » Plausible Analytics » Version: 1.0.1

cpe:2.3:a:plausible:plausible_analytics:1.0.1
Plausible » Plausible Analytics » Version: 1.1.0

cpe:2.3:a:plausible:plausible_analytics:1.1.0
Plausible » Plausible Analytics » Version: 1.2.0

cpe:2.3:a:plausible:plausible_analytics:1.2.0
Plausible » Plausible Analytics » Version: 1.2.1

cpe:2.3:a:plausible:plausible_analytics:1.2.1
Plausible » Plausible Analytics » Version: 1.2.2

cpe:2.3:a:plausible:plausible_analytics:1.2.2