Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-28856
4.3
MEDIUMCVSS v3
Severity scale
010
Description
Cross-Site Request Forgery (CSRF) vulnerability in dangrossman W3Counter Free Real-Time Web Stats blog-stats-by-w3counter allows Cross Site Request Forgery.This issue affects W3Counter Free Real-Time Web Stats: from n/a through <= 4.1.
NPM
GitHub