| |
Vulnerability CVE-2022-3904
Published: 2023-01-16
| Description: |
The MonsterInsights WordPress plugin before 8.9.1 does not sanitize or escape page titles in the top posts/pages section, allowing an unauthenticated attacker to inject arbitrary web scripts into the titles by spoofing requests to google analytics. |
Type:
CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))
References: |
https://wpscan.com/vulnerability/244d9ef1-335c-4f65-94ad-27c0c633f6ad
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
