Lucene search
+L

177 matches found

Cvelist
Cvelist
added 2025/01/09 8:15 p.m.18 views

CVE-2024-13289 Cookiebot + GTM - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-055

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Cookiebot + GTM allows Cross-Site Scripting XSS.This issue affects Cookiebot + GTM: from 0.0.0 before 1.0.18...

0.00281EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/09 8:15 p.m.10 views

CVE-2024-13289 Cookiebot + GTM - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-055

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Cookiebot + GTM allows Cross-Site Scripting XSS.This issue affects Cookiebot + GTM: from 0.0.0 before 1.0.18...

6.4AI score0.00281EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/10/16 12:51 p.m.6 views

Malicious code in example-gtm (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
added 2024/10/16 12:51 p.m.5 views

MAL-2024-9607 Malicious code in example-gtm (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
Patchstack
Patchstack
added 2024/09/30 12:00 a.m.18 views

WordPress GTM Server Side Plugin <= 2.1.19 is vulnerable to Cross Site Scripting (XSS)

Software GTM Server Side Type Plugin Vulnerable versions = 2.1.19 Fixed in 2.1.20 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8712 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID cddfd6eae0a1 Credits vgo0 Required...

6.1CVSS5.7AI score0.00364EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2024/09/28 9:15 a.m.10 views

CVE-2024-8712

The GTM Server Side plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.1.19. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in page...

6.1CVSS6AI score0.00364EPSS
SaveExploits0References3
NVD
NVD
added 2024/09/28 9:15 a.m.21 views

CVE-2024-8712

The GTM Server Side plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.1.19. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in page...

6.1CVSS0.00364EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/09/28 8:36 a.m.28 views

CVE-2024-8712 GTM Server Side <= 2.1.19 - Reflected Cross-Site Scripting

The GTM Server Side plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.1.19. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in page...

6.1CVSS0.00364EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/09/28 8:36 a.m.16 views

CVE-2024-8712 GTM Server Side <= 2.1.19 - Reflected Cross-Site Scripting

The GTM Server Side plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.1.19. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in page...

6.1CVSS6.4AI score0.00364EPSS
SaveExploits0References3
CVE
CVE
added 2024/09/28 8:36 a.m.68 views

CVE-2024-8712

CVE-2024-8712 affects GTM Server Side plugin for WordPress; it is a Reflected XSS due to unsafe use of add_query_arg in URLs in all versions ≤ 2.1.19, enabling unauthenticated attackers to inject scripts if a user is tricked into clicking a crafted link. The vulnerability is mitigated by upgradin...

6.1CVSS6.3AI score0.00364EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2024/09/28 12:00 a.m.9 views

PT-2024-39192 · WordPress · Gtm Server Side

Name of the Vulnerable Software and Affected Versions: GTM Server Side plugin for WordPress versions up to, and including, 2.1.19 Description: The issue is related to Reflected Cross-Site Scripting due to the use of add query arg without appropriate escaping on the URL. This allows unauthenticate...

6.1CVSS6.8AI score0.00364EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2024/09/28 12:00 a.m.7 views

WordPress plugin GTM Server Side 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.1CVSS5.8AI score0.00364EPSS
SaveExploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 12:44 p.m.5 views

Malicious code in gtm-js (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
added 2024/06/25 12:44 p.m.4 views

MAL-2024-2442 Malicious code in gtm-js (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 12:30 p.m.4 views

Malicious code in by-gtm (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
added 2024/06/25 12:30 p.m.9 views

MAL-2024-1851 Malicious code in by-gtm (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2023/10/18 4:41 p.m.9 views

bonpet.ee Cross Site Scripting vulnerability OBB-3753448

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
OpenVAS
OpenVAS
added 2023/10/04 12:00 a.m.21 views

WordPress Google Tag Manager for WordPress Plugin < 1.15.2 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gtm4wp:googletagmanager"; ifdescription...

5.5CVSS5.2AI score0.01094EPSS
SaveExploits1References1
F5 Networks
F5 Networks
added 2023/02/21 7:59 p.m.33 views

K10366: BIND vulnerability - CVE-2009-0696

Security Advisory Description Note : Versions that are not listed in this article have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of F5...

4.3CVSS6.7AI score0.12649EPSS
SaveExploits2
F5 Networks
F5 Networks
added 2023/02/21 7:57 p.m.24 views

K00724442: BIG-IP DNS and GTM DNSSEC security exposure

Security Advisory Description The BIG-IP DNSSEC implementation returns an incorrect NSEC3 record for a DNS query for a resource record type, which does not exist at given name. The incorrect record indicates that only one of TXT/HINFO/RP resource record types exists at given name, even if A or AA...

6.8AI score
SaveExploits0
Rows per page
Query Builder