Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 21/09/2015 Updated: 23/09/2015

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in the Google Analyticator plugin prior to 6.4.9.6 for WordPress allow remote malicious users to inject arbitrary web script or HTML via the (1) ga_adsense, (2) ga_admin_disable_DimentionIndex, (3) ga_downloads_prefix, (4) ga_downloads, or (5) ga_outbound_prefix parameter in the google-analyticator page to wp-admin/admin.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
sumome google analyticator

WordPress Google Analyticator plugin version 6494 suffers from cross site scripting vulnerabilities ...

CWE-79 https://wordpress.org/plugins/google-analyticator/changelog/https://wpvulndb.com/vulnerabilities/8159 https://www.netsparker.com/cve-2015-6238-multiple-xss-vulnerabilities-in-google-analyticator/https://nvd.nist.gov https://packetstormsecurity.com/files/133301/Google-Analyticator-6.4.9.4-Cross-Site-Scripting.html

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2015-6238

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect