CVE-2025-13513 | Clik Stats Plugin up to 0.8 on WordPress $_SERVER[‘PHP_SELF’] cross site scripting

A vulnerability, which was classified as problematic, was found in Clik Stats Plugin up to 0.8 on WordPress. This vulnerability affects unknown code. Such manipulation of the argument $_SERVER[‘PHP_SELF’] leads to cross site scripting.

This vulnerability is listed as CVE-2025-13513. The attack may be performed from remote. There is no available exploit.