PT-2022-14221 · Unknown · Google Tag Manager For Wordpress

Muhammad Zeeshan · Published 2022-06-13 · Updated 2026-04-08 · CVE-2022-1961

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Google Tag Manager for WordPress (GTM4WP) versions up to and including 1.15.1

Description The issue is related to Stored Cross-Site Scripting due to insufficient escaping via the gtm4wp-options[scroller-contentid] parameter found in the ~/public/frontend.php file. This allows attackers with administrative user access to inject arbitrary web scripts. The issue affects multi-site installations where unfiltered html is disabled for administrators, and sites where unfiltered html is disabled.

Recommendations For versions up to and including 1.15.1, update to a version higher than 1.15.1 to resolve the issue. As a temporary workaround, consider restricting access to the gtm4wp-options[scroller-contentid] parameter to minimize the risk of exploitation. Restrict administrative user access to trusted users only. Enable unfiltered html for administrators if possible, to reduce the risk of Stored Cross-Site Scripting.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-1961

Affected Products

Google Tag Manager For Wordpress

References · 9

• 🔥 https://gist.github.com/Xib3rR4dAr/02a21cd0ea0b7bf586131c5eebb69f1d · Exploit
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2732977%40duracelltomi-google-tag-manager&new=2732977%40duracelltomi-google-tag-manager&sfp_email=&sfph_mail= · Patch
• https://osv.dev/vulnerability/CVE-2022-1961 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-1961 · Security Note
• https://t.me/cveNotify/158484 · Telegram Post
• https://wordpress.org/plugins/duracelltomi-google-tag-manager/#developers · Note
• https://wordfence.com/vulnerability-advisories/#CVE-2022-1961 · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/202c14d0-9207-47cb-9410-ca4c70d7b6d2?source=cve · Note
• https://t.me/cibsecurity/44303 · Telegram Post