Lucene search
N/APATCHSTACK:4E3E9AB4A5A8F53C40B4AFF178A0B7DEHistoryAug 14, 2015 - 12:00 a.m.
WordPress Google Analyticator <= 6.4.9.5 - Multiple XSS
2015-08-1400:00:00
N/A
patchstack.com
10
EPSS
0.002
Percentile
57.0%
These vulnerabilities allow an attacker to inject arbitrary web script or HTML via the
- ga_downloads_prefix
- ga_downloads
- ga_adsense
- ga_admin_disable_DimentionIndex
- ga_outbound_prefix parameter in the google-analyticator page to wp-admin/admin.php.
Solution
Update the plugin.
Related
prion
prion
Cross site scripting
2015-09-21 19:59:00
packetstorm
packetstorm
Google Analyticator 6.4.9.4 Cross Site Scripting
2015-08-25 00:00:00
wpvulndb
wpvulndb
Google Analyticator <= 6.4.9.4 - Multiple Cross-Site Scripting (XSS)
2015-08-24 00:00:00
cve
cve
CVE-2015-6238
2015-09-21 19:59:01
nvd
nvd
CVE-2015-6238
2015-09-21 19:59:01
cvelist
cvelist
CVE-2015-6238
2015-09-21 19:00:00