CVE-2022-1961

🗓️ 13 Jun 2022 13:11:47Reported by WordfenceType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 113 Views🌐 WEB

The Google Tag Manager for WordPress (GTM4WP) plugin is vulnerable to Stored Cross-Site Scripting in versions up to and including 1.15.

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2022-1961	13 Jun 202218:18	–	circl
CNNVD	WordPress plugin Google Tag Manager 跨站脚本漏洞	13 Jun 202200:00	–	cnnvd
CNVD	WordPress Google Tag Manager plugin cross-site scripting vulnerability	15 Jun 202200:00	–	cnvd
Cvelist	CVE-2022-1961 Google Tag Manager for WordPress (GTM4WP) <= 1.15.1 - Stored Cross-Site Scripting via Content Element ID	13 Jun 202213:11	–	cvelist
EUVD	EUVD-2022-25229	3 Oct 202520:07	–	euvd
NVD	CVE-2022-1961	13 Jun 202214:15	–	nvd
OpenVAS	WordPress Google Tag Manager for WordPress Plugin < 1.15.2 XSS Vulnerability	4 Oct 202300:00	–	openvas
OSV	CVE-2022-1961	13 Jun 202214:15	–	osv
Patchstack	WordPress GTM4WP plugin <= 1.15.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability	31 May 202200:00	–	patchstack
Prion	Cross site scripting	13 Jun 202214:15	–	prion

NVD

Vulners

Node

gtm4wp google_tag_managerRange<1.15.2wordpress

[
  {
    "vendor": "duracelltomi",
    "product": "GTM4WP – A Google Tag Manager (GTM) plugin for WordPress",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.15.1",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/vulnerability-advisories/
wordpress	www.wordpress.org/plugins/duracelltomi-google-tag-manager/
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/202c14d0-9207-47cb-9410-ca4c70d7b6d2
gist	www.gist.github.com/Xib3rR4dAr/02a21cd0ea0b7bf586131c5eebb69f1d
plugins	www.plugins.trac.wordpress.org/changeset

Parameter	Position	Path	Description	CWE
gtm4wp-options[scroller-contentid]	request body	public/frontend.php	Stored XSS via insufficient escaping in gtm4wp-options[scroller-contentid] parameter in public/frontend.php (GTM4WP <= 1.15.1).	CWE-79