Source |
CVE Liste |
Identifiant |
8301580 |
Date de publication |
2023-01-16 16:15:10 (vue: 2023-01-16 17:19:45) |
Titre |
CVE-2022-3904 |
Texte |
The MonsterInsights WordPress plugin before 8.9.1 does not sanitize or escape page titles in the top posts/pages section, allowing an unauthenticated attacker to inject arbitrary web scripts into the titles by spoofing requests to google analytics. |
Notes |
|
Envoyé |
Oui |
Condensat |
2022 3904 allowing analytics arbitrary attacker before cve does escape google inject monsterinsights not page plugin posts/pages requests sanitize scripts section spoofing titles top unauthenticated web wordpress |
Tags |
|
Stories |
|
Move |
|