PT-2023-10280 · WordPress · Google Analytics Top Content Widget Plugin

Publicado 2023-04-15 · Atualizado 2024-05-17 · CVE-2015-10101

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Google Analytics Top Content Widget Plugin versions up to 1.5.6

Description A vulnerability was found in the Google Analytics Top Content Widget Plugin, affecting an unknown functionality of the file class-tgm-plugin-activation.php. The manipulation leads to cross-site scripting, and the attack can be launched remotely.

Recommendations For Google Analytics Top Content Widget Plugin versions up to 1.5.6, upgrade to version 1.5.7 to address this issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2015-10101

Produtos afetados

Google Analytics Top Content Widget Plugin

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2015-10101 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-10101 · Nota
• https://vuldb.com/?id.226117 · Nota
• https://vuldb.com/?ctiid.226117 · Nota
• https://t.me/cvenotify/48344 · Publicação no Telegram
• https://t.me/cvenotify/64330 · Publicação no Telegram
• https://t.me/cibsecurity/62238 · Publicação no Telegram
• https://github.com/wp-plugins/google-analytics-top-posts-widget/commit/25bb1dea113716200a6f0f3135801d84a7a65540 · Correção