CVE-2021-24438

MEDIO 6.1CVE-2021-24438 · Published 30/08/2021 · updated 17/06/2026

In breve

CVE-2021-24438 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda dashboard for google analytics (sharethis).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.83%, superiore al 57.6% delle vulnerabilità.
Correzione: aggiornare a 2.5.2 o successiva.

Package	Affected versions	Patched versions
dashboard for google analytics sharethis	`< 2.5.2`	`2.5.2`

Description

The ShareThis Dashboard for Google Analytics WordPress plugin before 2.5.2 does not sanitise or escape the 'ga_action' parameter in the stats view before outputting it back in an attribute when the plugin is connected to a Google Analytics account, leading to a reflected Cross-Site Scripting issue which will be executed in the context of a logged in administrator

References

wpscan.com/vulnerability/af472879-9328-45c2-957f-e7bed77e4c2d · Exploit

Altre vulnerabilità di dashboard for google analytics

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free