Slimstat Analytics
VeronaLabs
Developer
5.4.5
Latest version
80,000
Installations
No date
Last updated
Vulnerability history
0 present
25 patched
16 Mitigation rules
- Unauthenticated Stored Cross-Site Scripting via 'fh' vulnerability<= 5.3.51 day ago
- Authenticated (Subscriber+) SQL Injection via `args` Parameter vulnerability<= 5.3.1Feb 11, 2026
- Reflected Cross Site Scripting (XSS) vulnerability<= 5.3.2Jan 27, 2026
- Unauthenticated Stored Cross-Site Scripting via 'fh' Parameter vulnerability<= 5.3.3Jan 9, 2026
- Unauthenticated Stored Cross-Site Scripting via 'notes/resource' Parameters vulnerability<= 5.3.4Jan 9, 2026
- Unauthenticated Stored Cross-Site Scripting vulnerability<= 5.3.2Dec 19, 2025
- Unauthenticated Stored Cross-Site Scripting vulnerability<= 5.2.6Oct 14, 2024
- Authenticated Stored Cross-Site Scripting vulnerability<= 5.1.3Feb 1, 2024
- Authenticated (Contributor+) Blind SQL Injection via Shortcode vulnerability<= 5.0.9Sep 11, 2023
- Auth. Stored Cross-Site Scripting (XSS) vulnerability<= 5.0.9Aug 29, 2023
- Cross Site Scripting (XSS) vulnerability<= 5.0.8Aug 22, 2023
- Broken Access Control vulnerability<= 5.0.5.1Aug 22, 2023
- SQL Injection (SQLi) vulnerability<= 5.0.4May 11, 2023
- Reflected Cross-Site Scripting (XSS) vulnerability<= 5.0.4May 11, 2023
- Subscriber+ SQL Injection vulnerability< 4.9.4Apr 13, 2023
- Authenticated (Subscriber+) SQL Injection via Shortcode vulnerability<= 4.9.3.3Mar 31, 2023
- Auth. SQL Injection (SQLi) vulnerability<= 4.9.3.2Feb 28, 2023
- Unauthenticated Stored XSS vulnerability< 4.9.3Dec 20, 2022
- Cross-Site Request Forgery (CSRF) to Stored Cross-Site Scripting (XSS) + Setting Updates vulnerabilities<= 4.8.3Jul 10, 2019
- Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability<= 4.8May 22, 2019
- Cross Site Scripting<= 4.1.5.2Jul 26, 2015
- Cross Site Scripting<= 2.8.4May 15, 2015
- SQL Injections<= 3.9.5May 15, 2015
- XSS<= 3.9.1Jan 21, 2015
- XSS<= 3.5.5Jan 13, 2015