CVE-2021-24301

The Hotjar Connecticator WordPress plugin through 1.1.1 is vulnerable to Stored Cross-Site Scripting XSS in the 'hotjar script' textarea. The request did include a CSRF nonce that was properly verified by the server and this vulnerability could only be exploited by administrator users...

PT-2021-15838

Name of the Vulnerable Software and Affected Versions Hotjar Connecticator WordPress plugin versions through 1.1.1 Description The issue concerns Stored Cross-Site Scripting XSS in the hotjar script textarea. This could be exploited by administrator users, as the request includes a CSRF nonce tha...

CVE-2021-24301: Improper Neutralization of Input During Web Page Generation

The Hotjar Connecticator WordPress plugin through 1.1.1 is vulnerable to Stored Cross-Site Scripting XSS in the 'hotjar script' textarea. The request did include a CSRF nonce that was properly verified by the server and this vulnerability could only be exploited by administrator users...