Vulnerabilities > Firestats > Firestats > 1.1.3

DATE CVE VULNERABILITY TITLE RISK
2009-06-22 CVE-2009-2143 Code Injection vulnerability in Firestats
PHP remote file inclusion vulnerability in firestats-wordpress.php in the FireStats plugin before 1.6.2-stable for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the fs_javascript parameter.
network
low complexity
wordpress firestats CWE-94
7.5