Lucene search
WPScanCVELIST:CVE-2021-24438HistoryAug 30, 2021 - 2:11 p.m.
CVE-2021-24438 ShareThis Dashboard for Google Analytics < 2.5.2 - Reflected Cross-Site Scripting (XSS)
2021-08-3014:11:19
CWE-79
WPScan
www.cve.org
7
cve-2021-24438
sharethis dashboard
google analytics
cross-site scripting
wordpress plugin
administrator
EPSS
0.001
Percentile
43.2%
The ShareThis Dashboard for Google Analytics WordPress plugin before 2.5.2 does not sanitise or escape the ‘ga_action’ parameter in the stats view before outputting it back in an attribute when the plugin is connected to a Google Analytics account, leading to a reflected Cross-Site Scripting issue which will be executed in the context of a logged in administrator
CNA Affected
[
{
"product": "ShareThis Dashboard for Google Analytics",
"vendor": "Unknown",
"versions": [
{
"lessThan": "2.5.2",
"status": "affected",
"version": "2.5.2",
"versionType": "custom"
}
]
}
]Related
wpvulndb
wpvulndb
openvas
openvas
wpexploit
wpexploit
cve
cve
CVE-2021-24438
2021-08-30 15:15:07
nvd
nvd
CVE-2021-24438
2021-08-30 15:15:07
prion
prion
Cross site scripting
2021-08-30 15:15:00