177 matches found
CVE-2024-13289 Cookiebot + GTM - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-055
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Cookiebot + GTM allows Cross-Site Scripting XSS.This issue affects Cookiebot + GTM: from 0.0.0 before 1.0.18...
CVE-2024-13289 Cookiebot + GTM - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-055
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Cookiebot + GTM allows Cross-Site Scripting XSS.This issue affects Cookiebot + GTM: from 0.0.0 before 1.0.18...
Malicious code in example-gtm (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9607 Malicious code in example-gtm (npm)
--- -= Per source details. Do not edit below this line.=-...
WordPress GTM Server Side Plugin <= 2.1.19 is vulnerable to Cross Site Scripting (XSS)
Software GTM Server Side Type Plugin Vulnerable versions = 2.1.19 Fixed in 2.1.20 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8712 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID cddfd6eae0a1 Credits vgo0 Required...
CVE-2024-8712
The GTM Server Side plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.1.19. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in page...
CVE-2024-8712
The GTM Server Side plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.1.19. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in page...
CVE-2024-8712 GTM Server Side <= 2.1.19 - Reflected Cross-Site Scripting
The GTM Server Side plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.1.19. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in page...
CVE-2024-8712 GTM Server Side <= 2.1.19 - Reflected Cross-Site Scripting
The GTM Server Side plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.1.19. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in page...
CVE-2024-8712
CVE-2024-8712 affects GTM Server Side plugin for WordPress; it is a Reflected XSS due to unsafe use of add_query_arg in URLs in all versions ≤ 2.1.19, enabling unauthenticated attackers to inject scripts if a user is tricked into clicking a crafted link. The vulnerability is mitigated by upgradin...
PT-2024-39192 · WordPress · Gtm Server Side
Name of the Vulnerable Software and Affected Versions: GTM Server Side plugin for WordPress versions up to, and including, 2.1.19 Description: The issue is related to Reflected Cross-Site Scripting due to the use of add query arg without appropriate escaping on the URL. This allows unauthenticate...
WordPress plugin GTM Server Side 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
Malicious code in gtm-js (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2442 Malicious code in gtm-js (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in by-gtm (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-1851 Malicious code in by-gtm (npm)
--- -= Per source details. Do not edit below this line.=-...
bonpet.ee Cross Site Scripting vulnerability OBB-3753448
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
WordPress Google Tag Manager for WordPress Plugin < 1.15.2 XSS Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gtm4wp:googletagmanager"; ifdescription...
K10366: BIND vulnerability - CVE-2009-0696
Security Advisory Description Note : Versions that are not listed in this article have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of F5...
K00724442: BIG-IP DNS and GTM DNSSEC security exposure
Security Advisory Description The BIG-IP DNSSEC implementation returns an incorrect NSEC3 record for a DNS query for a resource record type, which does not exist at given name. The incorrect record indicates that only one of TXT/HINFO/RP resource record types exists at given name, even if A or AA...