WP Slimstat <= 4.8 - Unauthenticated Stored XSS from Visitors

This vulnerability allows a visitor to inject arbitrary JavasScript code on the plugin access log functionality, which is visible both on the plugin’s access log page and on the admin dashboard index—‚ the default page shown once you log in.