Lucene search
WpvulndbWPVDB-ID:3509DB7C-0520-4BEA-941E-935D8D1CA0B5HistoryFeb 14, 2023 - 12:00 a.m.
Opt-Out for Google Analytics < 2.3.5 - Admin+ Stored XSS
2023-02-1400:00:00
wpscan.com
7
google analytics
plugin
vulnerability
stored xss
attack
settings
admin
unfiltered_html
0.0005 Low
EPSS
Percentile
17.7%
The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
| CPE | Name | Operator | Version |
|---|---|---|---|
| google-analytics-opt-out | lt | 2.3.5 |
Related
cve
cve
CVE-2023-25712
2023-04-07 13:15:07
cvelist
cvelist
nvd
nvd
CVE-2023-25712
2023-04-07 13:15:07
prion
prion
Cross site scripting
2023-04-07 13:15:00
wordfence
wordfence