SHARE
CORE IMPACT v10 - Exploits Update (Tue Jan 26 2010)
Wordpress Google Analytics Plugin Cross-Site Scripting Exploit
Exploits/Cross Site Scripting (XSS)/Known Vulnerabilities []
• Tue Jan 26 2010
Input passed to the "s" parameter in index.php is not properly sanitised before being returned to the user in googleanalytics.php. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.
Exploits Vulnerabiltiy: NOCVE-9999-41354