CVE-2016-10912

The CVE concerns the WordPress universal-analytics plugin, specifically versions before 1.3.1, which are reported to be vulnerable to cross-site scripting (XSS). The affected component is the universal-analytics plugin for WordPress; the root cause is not spelled out beyond the XSS description in...

CVE-2016-10912

The universal-analytics plugin before 1.3.1 for WordPress has XSS...

CVE-2016-10912: Improper Neutralization of Input During Web Page Generation

The universal-analytics plugin before 1.3.1 for WordPress has XSS...

WordPress Universal Analytics Plugin <= 1.3.0 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

Universal Analytics <= 1.3.0 - Authenticated Cross-Site Scripting (XSS)

"A subscriber could update the plugins settings via the URL or AJAX. The settings were not sanitized before saving to the database and not escaped before outputted on the front end."...