CVE-2022-0206

6.1 mediumEPSS 1.4%

Medium (6.1) in newstatpress project newstatpress. EPSS 1.4% chance of exploitation in the next 30 days.

The NewStatPress WordPress plugin before 1.3.6 does not properly escape the whatX parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2022-02-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

newstatpress_project:newstatpress

References

https://wpscan.com/vulnerability/ce12437a-d440-4c4a-9247-95a8f39d00b9
https://wpscan.com/vulnerability/ce12437a-d440-4c4a-9247-95a8f39d00b9

Check your stack JSON