CVE-2022-40311

Auth. (admin+) Stored Cross-Site Scripting (XSS) in Fatcat Apps Analytics Cat plugin <= 1.0.9 on WordPress.

Score

CVSS 3.1 4.8 Medium

Status

Modified - audit@patchstack.com

Published

2022-10-21

Last modified

2026-04-28

Weaknesses

CWE-79

Affected products

• Analytics Cat Google Analytics Made Easy Wordpress Plugin (Fatcat Apps)
• Analytics Cat (Fatcatapps)

References

• https://patchstack.com/database/vulnerability/analytics-cat/wordpress-analytics-cat-plugin-1-0-9-authenticated-stored-c…
• https://wordpress.org/plugins/analytics-cat/#developers