CVE-2015-10101
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:N/I:P/A:N
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
6.3 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
35.2%
A vulnerability classified as problematic was found in Google Analytics Top Content Widget Plugin up to 1.5.6 on WordPress. Affected by this vulnerability is an unknown functionality of the file class-tgm-plugin-activation.php. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 1.5.7 is able to address this issue. The identifier of the patch is 25bb1dea113716200a6f0f3135801d84a7a65540. It is recommended to upgrade the affected component. The identifier VDB-226117 was assigned to this vulnerability.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| yoast | google_analytics | 1.5.0 | cpe:2.3:a:yoast:google_analytics:1.5.0:*:*:*:*:*:*:* |
| yoast | google_analytics | 1.5.1 | cpe:2.3:a:yoast:google_analytics:1.5.1:*:*:*:*:*:*:* |
| yoast | google_analytics | 1.5.2 | cpe:2.3:a:yoast:google_analytics:1.5.2:*:*:*:*:*:*:* |
| yoast | google_analytics | 1.5.3 | cpe:2.3:a:yoast:google_analytics:1.5.3:*:*:*:*:*:*:* |
| yoast | google_analytics | 1.5.4 | cpe:2.3:a:yoast:google_analytics:1.5.4:*:*:*:*:*:*:* |
| yoast | google_analytics | 1.5.5 | cpe:2.3:a:yoast:google_analytics:1.5.5:*:*:*:*:*:*:* |
| yoast | google_analytics | 1.5.6 | cpe:2.3:a:yoast:google_analytics:1.5.6:*:*:*:*:*:*:* |
CNA Affected
[
{
"vendor": "n/a",
"product": "Google Analytics Top Content Widget Plugin",
"versions": [
{
"version": "1.5.0",
"status": "affected"
},
{
"version": "1.5.1",
"status": "affected"
},
{
"version": "1.5.2",
"status": "affected"
},
{
"version": "1.5.3",
"status": "affected"
},
{
"version": "1.5.4",
"status": "affected"
},
{
"version": "1.5.5",
"status": "affected"
},
{
"version": "1.5.6",
"status": "affected"
}
]
}
]References
Social References
More
Related
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:N/I:P/A:N
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
6.3 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
35.2%