{"id":"CVE-2022-1005","summary":"WP Statistics \u003c 13.2.2 - Reflected Cross-Site Scripting","details":"The WP Statistics WordPress plugin before 13.2.2 does not sanitise the REQUEST_URI parameter before outputting it back in the rendered page, leading to Cross-Site Scripting (XSS) in web browsers which do not encode characters","modified":"2026-08-12T03:51:29.949297718Z","published":"2022-06-06T08:50:53Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1005.json","unresolved_ranges":[{"extracted_events":[{"introduced":"13.2.2"},{"last_affected":"13.2.2"}],"source":"AFFECTED_FIELD"},{"extracted_events":[{"fixed":"13.2.2"}],"source":"DESCRIPTION"}],"cna_assigner":"WPScan","cwe_ids":["CWE-79"]},"references":[{"type":"WEB","url":"https://wpscan.com/vulnerability/f37d1d55-10cc-4202-8d16-9ec2128f54f9"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1005.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1005"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/wp-statistics/wp-statistics","events":[{"introduced":"0"},{"fixed":"5adce98f45c31e3f7104c4e18d66beaabfdda9b4"}],"database_specific":{"cpe":"cpe:2.3:a:veronalabs:wp_statistics:*:*:*:*:*:wordpress:*:*","extracted_events":[{"introduced":"0"},{"fixed":"13.2.2"}],"source":"CPE_RANGE"}}],"versions":["13.0.7","13.0.5","13.0.4","13.0.3","13.0","12.6.13","12.6.12","12.6.11","12.6.10","12.6.9","12.6.8","12.6.7","12.6.6","12.6.5","12.6.4","12.6.3","12.6.2","12.6.1","12.6","12.5.7","12.5.6","12.5.5","12.5.4","12.5.3","12.5.2","12.5.1","12.5","12.4.3","12.4.1","12.4.0","12.3.6.4","12.3.6.2","12.3.6.1","12.3.6","12.3.5","12.3.4","12.3.3","12.3.2","12.3.1","12.3","12.2","12.1.3","12.1.2","12.1.1","12.1.0","12.0.12.1","12.0.12","12.0.11","12.0.10","12.0.9","12.0.8.1","12.0.8","12.0.7","12.0.6"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-1005.json"}}],"schema_version":"1.9.0"}