CVE-2021-24438

The ShareThis Dashboard for Google Analytics WordPress plugin before 2.5.2 does not sanitise or escape the 'gaaction' parameter in the stats view before outputting it back in an attribute when the plugin is connected to a Google Analytics account, leading to a reflected Cross-Site Scripting issue...

PT-2021-15966

Name of the Vulnerable Software and Affected Versions ShareThis Dashboard for Google Analytics WordPress plugin versions prior to 2.5.2 Description The issue is related to a reflected Cross-Site Scripting problem. It occurs because the ga action parameter in the stats view is not properly sanitiz...

WordPress plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the Google Analytics plugin for WordPress, versions...