CVE-2022-1961: XSS
First published: Mon Jun 13 2022(Updated: )
The Google Tag Manager for WordPress (GTM4WP) plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the `gtm4wp-options[scroller-contentid]` parameter found in the `~/public/frontend.php` file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 1.15.1. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled.
Credit: security@wordfence.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Google Tag Manager | <1.15.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://gist.github.com/Xib3rR4dAr/02a21cd0ea0b7bf586131c5eebb69f1d
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2732977%40duracelltomi-google-tag-manager&new=2732977%40duracelltomi-google-tag-manager&sfp_email=&sfph_mail=
- https://wordpress.org/plugins/duracelltomi-google-tag-manager/#developers
- https://www.wordfence.com/threat-intel/vulnerabilities/id/202c14d0-9207-47cb-9410-ca4c70d7b6d2?source=cve
- https://www.wordfence.com/vulnerability-advisories/#CVE-2022-1961
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2022-1961.
What is the severity of CVE-2022-1961?
The severity of CVE-2022-1961 is medium with a severity value of 5.5.
What is the affected software?
The affected software is the Google Tag Manager for WordPress (GTM4WP) plugin version up to 1.15.2.
How does CVE-2022-1961 exploit work?
CVE-2022-1961 exploits a stored cross-site scripting vulnerability in the 'gtm4wp-options[scroller-contentid]' parameter of the 'frontend.php' file, allowing attackers with administrative user access to inject arbitrary code.
Is there a fix for CVE-2022-1961?
Yes, users should update to the latest version of the Google Tag Manager for WordPress (GTM4WP) plugin to fix CVE-2022-1961.
- agent/author
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/references
- agent/weakness
- agent/severity
- agent/remedy
- agent/description
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- vendor/gtm4wp
- canonical/google tag manager