duracelltomi/gtm4wp

Releases72

Frequency1 month 2 weeks

Last Release 6 months ago

Stars164

Google Tag Manager plugin for WordPress

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2022-1707 ↗	Jun 13, 2022Monday, 13 June 2022, 13:15	6.1 MEDIUM	4.3 MEDIUM
The Google Tag Manager for WordPress plugin for WordPress is vulnerable to reflected Cross-Site Scripting via the s parameter due to the site search populating into the data layer of sites with insufficient sanitization in versions up to an including 1.15. The affected file is ~/public/frontend.php and this could be exploited by unauthenticated attackers.