Smartertools » Smarterstats : Security Vulnerabilities, CVEs, (XSS)
SmarterStats Version 11.3.6347 will Render the Referer Field of HTTP Logfiles from URL /Data/Reports/ReferringURLsWithQueries resulting in Stored Cross Site Scripting.
Max CVSS
6.1
EPSS Score
0.26%
Published
2017-09-30
Updated
2017-10-11
Multiple cross-site scripting (XSS) vulnerabilities in SmarterTools SmarterStats 6.2.4100 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script, as demonstrated by Default.aspx and certain other files.
Max CVSS
4.3
EPSS Score
0.14%
Published
2011-12-16
Updated
2011-12-16
Cross-site scripting (XSS) vulnerability in UserControls/Popups/frmHelp.aspx in SmarterStats 5.3, 5.3.3819, and possibly other 5.3 versions, allows remote attackers to inject arbitrary web script or HTML via the url parameter.
Max CVSS
4.3
EPSS Score
0.16%
Published
2010-09-16
Updated
2017-08-17
3 vulnerabilities found