Lucene search
+L

238 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:21 p.m.7 views

Malicious code in adobetagmanager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec1870d887494a972bd80c476b3d98e0e8287627387e4d102f406a3762ff6f42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:21 p.m.7 views

Malicious code in tag-manager-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 986d6aa3c75a03f6fe0c133f3da8dd1c573c7d82babb32b0b72179891bb9650f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:21 p.m.10 views

MAL-2022-6413 Malicious code in tag-manager-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 986d6aa3c75a03f6fe0c133f3da8dd1c573c7d82babb32b0b72179891bb9650f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:21 p.m.7 views

Malicious code in @landings-library/google-tag-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 485f248bde8506a2a05dd5dcfae0b0d5a28a9de8323eec216bd146889a93b50b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
CNVD
CNVD
added 2022/06/15 12:0 a.m.84 views

WordPress Google Tag Manager plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.5CVSS4.9AI score0.01094EPSS
SaveExploits1References1
OSV
OSV
added 2022/06/13 2:15 p.m.28 views

CVE-2022-1961

The Google Tag Manager for WordPress GTM4WP plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the gtm4wp-optionsscroller-contentid parameter found in the /public/frontend.php file which allowed attackers with administrative user access to inject arbitrary web...

4.8CVSS5.9AI score0.01094EPSS
SaveExploits1References5
NVD
NVD
added 2022/06/13 2:15 p.m.42 views

CVE-2022-1961

The Google Tag Manager for WordPress GTM4WP plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the gtm4wp-optionsscroller-contentid parameter found in the /public/frontend.php file which allowed attackers with administrative user access to inject arbitrary web...

5.5CVSS0.01094EPSS
SaveExploits1References5
Prion
Prion
added 2022/06/13 2:15 p.m.32 views

Cross site scripting

The Google Tag Manager for WordPress GTM4WP plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the gtm4wp-optionsscroller-contentid parameter found in the /public/frontend.php file which allowed attackers with administrative user access to inject arbitrary web...

3.5CVSS4.8AI score0.01094EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2022/06/13 1:15 p.m.40 views

CVE-2022-1707

The Google Tag Manager for WordPress plugin for WordPress is vulnerable to reflected Cross-Site Scripting via the s parameter due to the site search populating into the data layer of sites with insufficient sanitization in versions up to an including 1.15. The affected file is /public/frontend.ph...

6.1CVSS0.90154EPSS
SaveExploits0References5
Prion
Prion
added 2022/06/13 1:15 p.m.30 views

Cross site scripting

The Google Tag Manager for WordPress plugin for WordPress is vulnerable to reflected Cross-Site Scripting via the s parameter due to the site search populating into the data layer of sites with insufficient sanitization in versions up to an including 1.15. The affected file is /public/frontend.ph...

4.3CVSS6.1AI score0.90154EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2022/06/13 1:11 p.m.48 views

CVE-2022-1961 Google Tag Manager for WordPress (GTM4WP) <= 1.15.1 - Stored Cross-Site Scripting via Content Element ID

The Google Tag Manager for WordPress GTM4WP plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the gtm4wp-optionsscroller-contentid parameter found in the /public/frontend.php file which allowed attackers with administrative user access to inject arbitrary web...

5.5CVSS5.4AI score0.01094EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2022/06/13 1:11 p.m.8 views

CVE-2022-1961 Google Tag Manager for WordPress (GTM4WP) <= 1.15.1 - Stored Cross-Site Scripting via Content Element ID

The Google Tag Manager for WordPress GTM4WP plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the gtm4wp-optionsscroller-contentid parameter found in the /public/frontend.php file which allowed attackers with administrative user access to inject arbitrary web...

5.5CVSS6AI score0.01094EPSS
SaveExploits1References5
CVE
CVE
added 2022/06/13 1:11 p.m.125 views

CVE-2022-1961

The CVE-2022-1961 issue affects the WordPress GTM4WP (Google Tag Manager for WordPress) plugin. The vulnerability is a Stored XSS in the gtm4wp-options[scroller-contentid] parameter in ~/public/frontend.php, exploitable by attackers with administrative privileges. Affected releases are GTM4WP ver...

5.5CVSS4.7AI score0.01094EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2022/06/13 12:45 p.m.32 views

CVE-2022-1707 Google Tag Manager for WordPress <= 1.15 - Reflected Cross-Site Scripting via Site Search

The Google Tag Manager for WordPress plugin for WordPress is vulnerable to reflected Cross-Site Scripting via the s parameter due to the site search populating into the data layer of sites with insufficient sanitization in versions up to an including 1.15. The affected file is /public/frontend.ph...

6.1CVSS6.2AI score
SaveExploits0References7
CVE
CVE
added 2022/06/13 12:45 p.m.106 views

CVE-2022-1707

The CVE-2022-1707 issue affects the WordPress Google Tag Manager plugin (WordPress) up to version 1.15, where reflected Cross-Site Scripting can be triggered via the s parameter due to insufficient sanitization in site search data population to the data layer. The vulnerability targets the public...

6.1CVSS6AI score0.90154EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2022/06/13 12:45 p.m.41 views

CVE-2022-1707 Google Tag Manager for WordPress <= 1.15 - Reflected Cross-Site Scripting via Site Search

The Google Tag Manager for WordPress plugin for WordPress is vulnerable to reflected Cross-Site Scripting via the s parameter due to the site search populating into the data layer of sites with insufficient sanitization in versions up to an including 1.15. The affected file is /public/frontend.ph...

6.1CVSS6.2AI score0.90154EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2022/06/13 12:45 p.m.11 views

CVE-2022-1707 Google Tag Manager for WordPress <= 1.15 - Reflected Cross-Site Scripting via Site Search

The Google Tag Manager for WordPress plugin for WordPress is vulnerable to reflected Cross-Site Scripting via the s parameter due to the site search populating into the data layer of sites with insufficient sanitization in versions up to an including 1.15. The affected file is /public/frontend.ph...

6.1CVSS6.2AI score0.90154EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/06/13 12:0 a.m.11 views

WordPress plugin Google Tag Manager 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.5CVSS5.6AI score0.01094EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2022/06/13 12:0 a.m.7 views

WordPress plugin Google Tag Manager 跨站脚本漏洞

WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin Google Tag Manager version 1.15 has a cross-site scripting vulnerability that stems from the fact that site searches are n...

6.1CVSS5.2AI score0.90154EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2022/06/13 12:0 a.m.9 views

PT-2022-14221

Name of the Vulnerable Software and Affected Versions Google Tag Manager for WordPress GTM4WP versions up to and including 1.15.1 Description The issue is related to Stored Cross-Site Scripting due to insufficient escaping via the gtm4wp-optionsscroller-contentid parameter found in the...

5.5CVSS5.8AI score0.01094EPSS
SaveExploits1References9
Rows per page
Query Builder