A vulnerability, which was classified as problematic, was found in StatCounter Plugin up to 2.1.0 on WordPress. The affected element is an unknown function. The manipulation of the argument Nickname results in cross site scripting.
This vulnerability is reported as CVE-2025-13048. The attack can be launched remotely. No exploit exists.
