Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2021-24438
HistoryAug 30, 2021 - 3:15 p.m.

Cross site scripting

2021-08-3015:15:00
PRIOn knowledge base
www.prio-n.com
5

0.001 Low

EPSS

Percentile

43.3%

JSON

The ShareThis Dashboard for Google Analytics WordPress plugin before 2.5.2 does not sanitise or escape the ‘ga_action’ parameter in the stats view before outputting it back in an attribute when the plugin is connected to a Google Analytics account, leading to a reflected Cross-Site Scripting issue which will be executed in the context of a logged in administrator

CPENameOperatorVersion
dashboard_for_google_analyticslt2.5.2

Related

cve 1
wpexploit 1
cvelist 1
openvas 1
wpvulndb 1
nvd 1
cve
cve
CVE-2021-24438
2021-08-30 15:15:07
wpexploit
wpexploit
ShareThis Dashboard for Google Analytics < 2.5.2 - Reflected Cross-Site Scripting (XSS)
2021-08-02 00:00:00
cvelist
cvelist
CVE-2021-24438 ShareThis Dashboard for Google Analytics < 2.5.2 - Reflected Cross-Site Scripting (XSS)
2021-08-30 14:11:19
openvas
openvas
WordPress ShareThis Dashboard for Google Analytics Plugin < 2.5.2 XSS Vulnerability
2021-09-03 00:00:00
wpvulndb
wpvulndb
ShareThis Dashboard for Google Analytics < 2.5.2 - Reflected Cross-Site Scripting (XSS)
2021-08-02 00:00:00
nvd
nvd
CVE-2021-24438
2021-08-30 15:15:07

0.001 Low

EPSS

Percentile

43.3%

JSON
Related for PRION:CVE-2021-24438
cve1wpexploit1cvelist1openvas1wpvulndb1nvd1