CVE-2015-6238: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Google Analyticator plugin before 6.4.9.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 gaadsense, 2 gaadmindisableDimentionIndex, 3 gadownloadsprefix, 4 gadownloads, or 5 gaoutboundprefix parameter i...