Statcounter is susceptible to a script injection user session hijacking flaw.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/39092/statcounter.txt
Source: https://packetstormsecurity.com/files/39092/statcounter.txt.html