CVE-2012-5341

CVE-2012-5341 describes multiple cross-site scripting (XSS) vulnerabilities in statistik.php within Otterware StatIt 4. These flaws allow remote attackers to inject arbitrary web script or HTML through the 'action', 'show', and 'order' parameters. With a CVSS score of 4.3 (medium severity), successful exploitation requires medium attack complexity and could lead to information disclosure or session hijacking, but not denial of service. While not listed on CISA's KEV catalog, an exploit is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.