CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-4599

The Slimstat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'eeb_mailto' shortcode in versions up to, and including, 2.1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 27.5%

CVSS Severity

CVSS v3 Score 6.4

References

Products affected by CVE-2023-4599

Wp-Webhooks » Email Encoder » Version: 0.10

cpe:2.3:a:wp-webhooks:email_encoder:0.10
Wp-Webhooks » Email Encoder » Version: 0.11

cpe:2.3:a:wp-webhooks:email_encoder:0.11
Wp-Webhooks » Email Encoder » Version: 0.12

cpe:2.3:a:wp-webhooks:email_encoder:0.12
Wp-Webhooks » Email Encoder » Version: 0.20

cpe:2.3:a:wp-webhooks:email_encoder:0.20
Wp-Webhooks » Email Encoder » Version: 0.21

cpe:2.3:a:wp-webhooks:email_encoder:0.21
Wp-Webhooks » Email Encoder » Version: 0.22

cpe:2.3:a:wp-webhooks:email_encoder:0.22
Wp-Webhooks » Email Encoder » Version: 0.30

cpe:2.3:a:wp-webhooks:email_encoder:0.30
Wp-Webhooks » Email Encoder » Version: 0.31

cpe:2.3:a:wp-webhooks:email_encoder:0.31
Wp-Webhooks » Email Encoder » Version: 0.32

cpe:2.3:a:wp-webhooks:email_encoder:0.32
Wp-Webhooks » Email Encoder » Version: 0.40

cpe:2.3:a:wp-webhooks:email_encoder:0.40
Wp-Webhooks » Email Encoder » Version: 0.41

cpe:2.3:a:wp-webhooks:email_encoder:0.41
Wp-Webhooks » Email Encoder » Version: 0.42

cpe:2.3:a:wp-webhooks:email_encoder:0.42
Wp-Webhooks » Email Encoder » Version: 0.50

cpe:2.3:a:wp-webhooks:email_encoder:0.50
Wp-Webhooks » Email Encoder » Version: 0.60

cpe:2.3:a:wp-webhooks:email_encoder:0.60
Wp-Webhooks » Email Encoder » Version: 0.70

cpe:2.3:a:wp-webhooks:email_encoder:0.70
Wp-Webhooks » Email Encoder » Version: 0.71

cpe:2.3:a:wp-webhooks:email_encoder:0.71
Wp-Webhooks » Email Encoder » Version: 0.80

cpe:2.3:a:wp-webhooks:email_encoder:0.80
Wp-Webhooks » Email Encoder » Version: 1.0.0

cpe:2.3:a:wp-webhooks:email_encoder:1.0.0
Wp-Webhooks » Email Encoder » Version: 1.0.1

cpe:2.3:a:wp-webhooks:email_encoder:1.0.1
Wp-Webhooks » Email Encoder » Version: 1.1.0

cpe:2.3:a:wp-webhooks:email_encoder:1.1.0
Wp-Webhooks » Email Encoder » Version: 1.2.0

cpe:2.3:a:wp-webhooks:email_encoder:1.2.0
Wp-Webhooks » Email Encoder » Version: 1.2.1

cpe:2.3:a:wp-webhooks:email_encoder:1.2.1
Wp-Webhooks » Email Encoder » Version: 1.3.0

cpe:2.3:a:wp-webhooks:email_encoder:1.3.0
Wp-Webhooks » Email Encoder » Version: 1.4.0

cpe:2.3:a:wp-webhooks:email_encoder:1.4.0
Wp-Webhooks » Email Encoder » Version: 1.4.1

cpe:2.3:a:wp-webhooks:email_encoder:1.4.1
Wp-Webhooks » Email Encoder » Version: 1.4.2

cpe:2.3:a:wp-webhooks:email_encoder:1.4.2
Wp-Webhooks » Email Encoder » Version: 1.4.3

cpe:2.3:a:wp-webhooks:email_encoder:1.4.3
Wp-Webhooks » Email Encoder » Version: 1.4.4

cpe:2.3:a:wp-webhooks:email_encoder:1.4.4
Wp-Webhooks » Email Encoder » Version: 1.4.5

cpe:2.3:a:wp-webhooks:email_encoder:1.4.5
Wp-Webhooks » Email Encoder » Version: 1.4.6

cpe:2.3:a:wp-webhooks:email_encoder:1.4.6
Wp-Webhooks » Email Encoder » Version: 1.5.2

cpe:2.3:a:wp-webhooks:email_encoder:1.5.2
Wp-Webhooks » Email Encoder » Version: 1.51

cpe:2.3:a:wp-webhooks:email_encoder:1.51
Wp-Webhooks » Email Encoder » Version: 1.53

cpe:2.3:a:wp-webhooks:email_encoder:1.53
Wp-Webhooks » Email Encoder » Version: 2.0.0

cpe:2.3:a:wp-webhooks:email_encoder:2.0.0
Wp-Webhooks » Email Encoder » Version: 2.0.1

cpe:2.3:a:wp-webhooks:email_encoder:2.0.1
Wp-Webhooks » Email Encoder » Version: 2.0.2

cpe:2.3:a:wp-webhooks:email_encoder:2.0.2
Wp-Webhooks » Email Encoder » Version: 2.0.3

cpe:2.3:a:wp-webhooks:email_encoder:2.0.3
Wp-Webhooks » Email Encoder » Version: 2.0.4

cpe:2.3:a:wp-webhooks:email_encoder:2.0.4
Wp-Webhooks » Email Encoder » Version: 2.0.5

cpe:2.3:a:wp-webhooks:email_encoder:2.0.5
Wp-Webhooks » Email Encoder » Version: 2.0.6

cpe:2.3:a:wp-webhooks:email_encoder:2.0.6
Wp-Webhooks » Email Encoder » Version: 2.0.7

cpe:2.3:a:wp-webhooks:email_encoder:2.0.7
Wp-Webhooks » Email Encoder » Version: 2.0.8

cpe:2.3:a:wp-webhooks:email_encoder:2.0.8
Wp-Webhooks » Email Encoder » Version: 2.0.9

cpe:2.3:a:wp-webhooks:email_encoder:2.0.9
Wp-Webhooks » Email Encoder » Version: 2.1.0

cpe:2.3:a:wp-webhooks:email_encoder:2.1.0
Wp-Webhooks » Email Encoder » Version: 2.1.1

cpe:2.3:a:wp-webhooks:email_encoder:2.1.1
Wp-Webhooks » Email Encoder » Version: 2.1.2

cpe:2.3:a:wp-webhooks:email_encoder:2.1.2
Wp-Webhooks » Email Encoder » Version: 2.1.3

cpe:2.3:a:wp-webhooks:email_encoder:2.1.3
Wp-Webhooks » Email Encoder » Version: 2.1.4

cpe:2.3:a:wp-webhooks:email_encoder:2.1.4
Wp-Webhooks » Email Encoder » Version: 2.1.5

cpe:2.3:a:wp-webhooks:email_encoder:2.1.5
Wp-Webhooks » Email Encoder » Version: 2.1.6

cpe:2.3:a:wp-webhooks:email_encoder:2.1.6
Wp-Webhooks » Email Encoder » Version: 2.1.7

cpe:2.3:a:wp-webhooks:email_encoder:2.1.7

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-4599

Products

Pricing

Contact Us