{"cve":{"cve_id":"CVE-2017-20099","is_kev":false,"kev_date_added":null,"kev_vendor_project":null,"kev_product":null,"kev_vulnerability_name":null,"kev_short_description":null,"kev_required_action":null,"kev_due_date":null,"kev_known_ransomware":null,"kev_notes":null,"kev_cwes":null,"epss_score":0.00945,"epss_percentile":0.56455,"epss_as_of":"2026-06-23","description":"A vulnerability was found in Analytics Stats Counter Statistics Plugin 1.2.2.5 and classified as critical. This issue affects some unknown processing. The manipulation leads to code injection. The attack may be initiated remotely.","published_at":"2022-06-27T18:11:03Z","last_modified_at":null,"cvss_v3_score":7.3,"cvss_v3_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss_v3_severity":"HIGH","cvss_v4_score":null,"cvss_v4_vector":null,"cvss_v4_severity":null,"ssvc_decision":null,"ssvc_exploitation":"poc","ssvc_automatable":true,"ssvc_technical_impact":"partial","cwes":["CWE-94"],"nvd_references":["http://seclists.org/fulldisclosure/2017/Feb/74","https://vuldb.com/?id.97367"],"vuln_status":null,"trending_score":null,"is_trending":false,"has_trended":false,"trended_number_one":false,"trending_peak_score":null,"trending_peak_rank":null,"started_trending_at":null,"trended_number_one_at":null,"summary_generated":null,"summary_generated_at":null,"summary_model":null,"created_at":"2026-06-24T00:09:39.878444Z","updated_at":"2026-06-28T23:09:54.477707Z"},"effective_severity":"HIGH","badges":[],"impact_analysis":[],"cvss_v3_decoded":{"version":"3.1","metrics":[{"metric":"AV","name":"Attack Vector","value":"N","value_label":"Network"},{"metric":"AC","name":"Attack Complexity","value":"L","value_label":"Low"},{"metric":"PR","name":"Privileges Required","value":"N","value_label":"None"},{"metric":"UI","name":"User Interaction","value":"N","value_label":"None"},{"metric":"S","name":"Scope","value":"U","value_label":"Unchanged"},{"metric":"C","name":"Confidentiality","value":"L","value_label":"Low"},{"metric":"I","name":"Integrity","value":"L","value_label":"Low"},{"metric":"A","name":"Availability","value":"L","value_label":"Low"}]},"cvss_v4_decoded":{"version":null,"metrics":[]},"affected":[{"vendor_slug":"unspecified","vendor_name":"unspecified","product_slug":"analytics-stats-counter-statistics-plugin","product_name":"Analytics Stats Counter Statistics Plugin","version_start":"1.2.2.5","version_start_inclusive":true,"version_end":"1.2.2.5","version_end_inclusive":true,"cpe23_uri":"cve5:unspecified:analytics-stats-counter-statistics-plugin:1.2.2.5:1.2.2.5"}],"exploit_refs":[],"news":[],"references":[{"url":"http://seclists.org/fulldisclosure/2017/Feb/74","source_type":"MAILING_LIST","tags":["mailing-list"]},{"url":"https://vuldb.com/?id.97367","source_type":"MISC","tags":[]}],"timeline":[{"type":"published","at":"2022-06-27T18:11:03Z","label":"CVE published","source":null},{"type":"ssvc_changed","at":"2026-06-24T00:31:06.710831Z","label":"SSVC decision revised","source":"vulnrichment"},{"type":"ssvc_changed","at":"2026-06-24T00:31:06.710831Z","label":"SSVC decision revised","source":"vulnrichment"},{"type":"ssvc_changed","at":"2026-06-24T00:31:06.710831Z","label":"SSVC decision revised","source":"vulnrichment"},{"type":"cvss_changed","at":"2026-06-24T00:31:06.710831Z","label":"CVSS score revised","source":"vulnrichment"},{"type":"cvss_changed","at":"2026-06-24T00:31:06.710831Z","label":"CVSS score revised","source":"vulnrichment"},{"type":"cvss_changed","at":"2026-06-24T00:31:06.710831Z","label":"CVSS score revised","source":"vulnrichment"}]}