Slimstat Analytics
VeronaLabs
Developer
5.4.8
Latest version
80,000
Installations
No date
Last updated
Vulnerability history
0 present
25 patched
16 Mitigation rules
- Unauthenticated Stored Cross-Site Scripting via 'fh' vulnerability<= 5.3.520/03/2026
- Authenticated (Subscriber+) SQL Injection via `args` Parameter vulnerability<= 5.3.111/02/2026
- Reflected Cross Site Scripting (XSS) vulnerability<= 5.3.227/01/2026
- Unauthenticated Stored Cross-Site Scripting via 'fh' Parameter vulnerability<= 5.3.309/01/2026
- Unauthenticated Stored Cross-Site Scripting via 'notes/resource' Parameters vulnerability<= 5.3.409/01/2026
- Unauthenticated Stored Cross-Site Scripting vulnerability<= 5.3.219/12/2025
- Unauthenticated Stored Cross-Site Scripting vulnerability<= 5.2.614/10/2024
- Authenticated Stored Cross-Site Scripting vulnerability<= 5.1.301/02/2024
- Authenticated (Contributor+) Blind SQL Injection via Shortcode vulnerability<= 5.0.911/09/2023
- Auth. Stored Cross-Site Scripting (XSS) vulnerability<= 5.0.929/08/2023
- Cross Site Scripting (XSS) vulnerability<= 5.0.822/08/2023
- Broken Access Control vulnerability<= 5.0.5.122/08/2023
- SQL Injection (SQLi) vulnerability<= 5.0.411/05/2023
- Reflected Cross-Site Scripting (XSS) vulnerability<= 5.0.411/05/2023
- Subscriber+ SQL Injection vulnerability< 4.9.413/04/2023
- Authenticated (Subscriber+) SQL Injection via Shortcode vulnerability<= 4.9.3.331/03/2023
- Auth. SQL Injection (SQLi) vulnerability<= 4.9.3.228/02/2023
- Unauthenticated Stored XSS vulnerability< 4.9.320/12/2022
- Cross-Site Request Forgery (CSRF) to Stored Cross-Site Scripting (XSS) + Setting Updates vulnerabilities<= 4.8.310/07/2019
- Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability<= 4.822/05/2019
- Cross Site Scripting<= 4.1.5.226/07/2015
- Cross Site Scripting<= 2.8.415/05/2015
- SQL Injections<= 3.9.515/05/2015
- XSS<= 3.9.121/01/2015
- XSS<= 3.5.513/01/2015