CVE · Medium

CVE-2023-0082 — ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin) [google-analytics-dashboard-for-wp] < 7.12.1

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2023-0082 ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin) [google-analytics-dashboard-for-wp] < 7.12.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Medium 5.4 < 7.12.1 7.12.1 2023-01-13

CVE-2023-0082

The ExactMetrics Google Analytics Dashboard plugin for WordPress contains a cross-site scripting vulnerability in versions before 7.12.1 that allows attackers to inject malicious scripts into websites. An attacker could exploit this flaw to execute arbitrary code such as redirects, advertisements, or other HTML content when visitors access an affected site. The vulnerability was discovered by Lana Codes and has been resolved in version 7.12.1 and later.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.