CVE-2022-1707: XSS
First published: Mon Jun 13 2022(Updated: )
The Google Tag Manager for WordPress plugin for WordPress is vulnerable to reflected Cross-Site Scripting via the s parameter due to the site search populating into the data layer of sites with insufficient sanitization in versions up to an including 1.15. The affected file is ~/public/frontend.php and this could be exploited by unauthenticated attackers.
Credit: security@wordfence.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Google Tag Manager | <=1.15 | |
| Google Tag Manager | <1.15.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/duracelltomi/gtm4wp/blob/1.15/public/frontend.php#L298
- https://github.com/duracelltomi/gtm4wp/blob/1.15/public/frontend.php#L782
- https://github.com/duracelltomi/gtm4wp/issues/224
- https://www.wordfence.com/threat-intel/vulnerabilities/id/0435ae14-c1fd-4611-acbe-5f3bafd4bb6a?source=cve
- https://www.wordfence.com/vulnerability-advisories/#CVE-2022-1707
Frequently Asked Questions
What is CVE-2022-1707?
CVE-2022-1707 is a vulnerability in the Google Tag Manager for WordPress plugin for WordPress, which allows for reflected Cross-Site Scripting (XSS) attacks.
How does the vulnerability in the Google Tag Manager for WordPress plugin occur?
The vulnerability occurs due to insufficient sanitization of the 's' parameter in the site search, which populates into the data layer.
What is the severity of CVE-2022-1707?
CVE-2022-1707 has a severity rating of 6.1 (medium).
Which versions of the Google Tag Manager for WordPress plugin are affected by CVE-2022-1707?
Versions up to and including 1.15, and up to but excluding 1.15.1, of the Google Tag Manager for WordPress plugin are affected by CVE-2022-1707.
How can I fix CVE-2022-1707?
To fix CVE-2022-1707, update the Google Tag Manager for WordPress plugin to version 1.15.1 or later.
- agent/author
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/references
- agent/last-modified-date
- agent/description
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- vendor/gtm4wp
- canonical/google tag manager
- version/google tag manager/1.15