description: Cross-site scripting vulnerability in WP Statistics version 12.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via specially crafted HTTP Referer headers.
problem types: Cross-site scripting
affected:
{
product: WP Statistics
vendor: WP Statistics
versions:
status: affected, version: version 12.0.4 and earlier
}