title: Slimstat Analytics < 4.9.3 - Unauthenticated Stored XSS
description: The Slimstat Analytics WordPress plugin before 4.9.3 does not sanitise and escape the URI when logging requests, which could allow unauthenticated attackers to perform Stored Cross-Site Scripting attacks against logged in admin viewing the logs
problem types: CWE-79 Cross-Site Scripting (XSS)
affected:
{
vendor: Unknown
product: Slimstat Analytics
versions:
status: affected, versionType: custom, version: 0, lessThan: 4.9.3
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
}