PT-2020-15273 · Google · Lara Google Analytics Plugin

Jerome Bruandet · Published 2020-08-31 · Updated 2020-09-08 · CVE-2020-20626

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Lara Google Analytics plugin versions through 2.0.4

Description The issue allows for authenticated stored XSS in the Lara Google Analytics plugin.

Recommendations For versions through 2.0.4, update to a version later than 2.0.4 to resolve the issue.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-20626

Affected Products

Lara Google Analytics Plugin

References · 3

• 🔥 https://blog.nintechnet.com/zero-day-vulnerability-exploited-in-wordpress-lara-google-analytics-plugin · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-20626 · Security Note
• https://osv.dev/vulnerability/CVE-2020-20626 · Vendor Advisory