Vulnerabilities (CVE)

Filtered by vendor Castos Subscribe
Filtered by product Seriously Simple Stats
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-45005 1 Castos 1 Seriously Simple Stats 2023-12-10 N/A 6.1 MEDIUM
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Castos Seriously Simple Stats plugin <= 1.5.1 versions.
CVE-2023-45001 1 Castos 1 Seriously Simple Stats 2023-12-10 N/A 9.8 CRITICAL
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Castos Seriously Simple Stats allows SQL Injection.This issue affects Seriously Simple Stats: from n/a through 1.5.0.