WP Visitor Statistics (Real Time Traffic), CVE-2022-4656

CVE, Research URL: CVE-2022-4656
Home page URL: Security reports for WP Visitor Statistics (Real Time Traffic)
Application: WP Visitor Statistics (Real Time Traffic)
Published on: Feb 13, 2023
Research Description: The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 6.5 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.
Affected versions: max 6.5.
Status: vulnerable