Unscored CVE-2007-3288 EUVD-2007-3278GHSA-jgjj-vrw9-h43x

Cross-site scripting (XSS) vulnerability in the skeltoac stats (Automattic Stats) 1.0 plugin for WordPress allows remote attackers to injec…

Published Jun 20, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in the skeltoac stats (Automattic Stats) 1.0 plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer field.

References

24551 vdb-entry
automatticstats-wordpress-header-xss(34934) vdb-entry
2826 third-party-advisory
38472 vdb-entry
20070619 Persistent cross-site scripting in wordpress.com dashboard mailing-list