CVE-2026-48839
VeronaLabs WP Statistics
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs WP Statistics allows DOM-Based XSS. This issue affects WP Statistics: from n/a through 14.16.6.
- CVSS
- 7.1
- EPSS
- 0.21% 11.6% percentile
- CISA KEV
- Not listed
- Published
- 2026.06.02