CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-1961

The Google Tag Manager for WordPress (GTM4WP) plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the `gtm4wp-options[scroller-contentid]` parameter found in the `~/public/frontend.php` file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 1.15.1. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.011

EPSS Ranking 77.5%

CVSS Severity

CVSS v3 Score 5.5

CVSS v2 Score 3.5

References

Products affected by CVE-2022-1961

Gtm4wp » Google Tag Manager » Version: N/A

cpe:2.3:a:gtm4wp:google_tag_manager:-
Gtm4wp » Google Tag Manager » Version: 0.1

cpe:2.3:a:gtm4wp:google_tag_manager:0.1
Gtm4wp » Google Tag Manager » Version: 0.2

cpe:2.3:a:gtm4wp:google_tag_manager:0.2
Gtm4wp » Google Tag Manager » Version: 0.3

cpe:2.3:a:gtm4wp:google_tag_manager:0.3
Gtm4wp » Google Tag Manager » Version: 0.4

cpe:2.3:a:gtm4wp:google_tag_manager:0.4
Gtm4wp » Google Tag Manager » Version: 0.5

cpe:2.3:a:gtm4wp:google_tag_manager:0.5
Gtm4wp » Google Tag Manager » Version: 0.5.1

cpe:2.3:a:gtm4wp:google_tag_manager:0.5.1
Gtm4wp » Google Tag Manager » Version: 0.6

cpe:2.3:a:gtm4wp:google_tag_manager:0.6
Gtm4wp » Google Tag Manager » Version: 0.7

cpe:2.3:a:gtm4wp:google_tag_manager:0.7
Gtm4wp » Google Tag Manager » Version: 0.7.1

cpe:2.3:a:gtm4wp:google_tag_manager:0.7.1
Gtm4wp » Google Tag Manager » Version: 0.8

cpe:2.3:a:gtm4wp:google_tag_manager:0.8
Gtm4wp » Google Tag Manager » Version: 0.8.1

cpe:2.3:a:gtm4wp:google_tag_manager:0.8.1
Gtm4wp » Google Tag Manager » Version: 0.8.2

cpe:2.3:a:gtm4wp:google_tag_manager:0.8.2
Gtm4wp » Google Tag Manager » Version: 0.9

cpe:2.3:a:gtm4wp:google_tag_manager:0.9
Gtm4wp » Google Tag Manager » Version: 0.9.1

cpe:2.3:a:gtm4wp:google_tag_manager:0.9.1
Gtm4wp » Google Tag Manager » Version: 1.0

cpe:2.3:a:gtm4wp:google_tag_manager:1.0
Gtm4wp » Google Tag Manager » Version: 1.1

cpe:2.3:a:gtm4wp:google_tag_manager:1.1
Gtm4wp » Google Tag Manager » Version: 1.1.1

cpe:2.3:a:gtm4wp:google_tag_manager:1.1.1
Gtm4wp » Google Tag Manager » Version: 1.10

cpe:2.3:a:gtm4wp:google_tag_manager:1.10
Gtm4wp » Google Tag Manager » Version: 1.10.1

cpe:2.3:a:gtm4wp:google_tag_manager:1.10.1
Gtm4wp » Google Tag Manager » Version: 1.11

cpe:2.3:a:gtm4wp:google_tag_manager:1.11
Gtm4wp » Google Tag Manager » Version: 1.11.1

cpe:2.3:a:gtm4wp:google_tag_manager:1.11.1
Gtm4wp » Google Tag Manager » Version: 1.11.2

cpe:2.3:a:gtm4wp:google_tag_manager:1.11.2
Gtm4wp » Google Tag Manager » Version: 1.11.3

cpe:2.3:a:gtm4wp:google_tag_manager:1.11.3
Gtm4wp » Google Tag Manager » Version: 1.11.4

cpe:2.3:a:gtm4wp:google_tag_manager:1.11.4
Gtm4wp » Google Tag Manager » Version: 1.11.5

cpe:2.3:a:gtm4wp:google_tag_manager:1.11.5
Gtm4wp » Google Tag Manager » Version: 1.11.6

cpe:2.3:a:gtm4wp:google_tag_manager:1.11.6
Gtm4wp » Google Tag Manager » Version: 1.12

cpe:2.3:a:gtm4wp:google_tag_manager:1.12
Gtm4wp » Google Tag Manager » Version: 1.12.1

cpe:2.3:a:gtm4wp:google_tag_manager:1.12.1
Gtm4wp » Google Tag Manager » Version: 1.12.2

cpe:2.3:a:gtm4wp:google_tag_manager:1.12.2
Gtm4wp » Google Tag Manager » Version: 1.12.3

cpe:2.3:a:gtm4wp:google_tag_manager:1.12.3
Gtm4wp » Google Tag Manager » Version: 1.13

cpe:2.3:a:gtm4wp:google_tag_manager:1.13
Gtm4wp » Google Tag Manager » Version: 1.13.1

cpe:2.3:a:gtm4wp:google_tag_manager:1.13.1
Gtm4wp » Google Tag Manager » Version: 1.14

cpe:2.3:a:gtm4wp:google_tag_manager:1.14
Gtm4wp » Google Tag Manager » Version: 1.14.1

cpe:2.3:a:gtm4wp:google_tag_manager:1.14.1
Gtm4wp » Google Tag Manager » Version: 1.14.2

cpe:2.3:a:gtm4wp:google_tag_manager:1.14.2
Gtm4wp » Google Tag Manager » Version: 1.15

cpe:2.3:a:gtm4wp:google_tag_manager:1.15
Gtm4wp » Google Tag Manager » Version: 1.15.1

cpe:2.3:a:gtm4wp:google_tag_manager:1.15.1
Gtm4wp » Google Tag Manager » Version: 1.2

cpe:2.3:a:gtm4wp:google_tag_manager:1.2
Gtm4wp » Google Tag Manager » Version: 1.3

cpe:2.3:a:gtm4wp:google_tag_manager:1.3
Gtm4wp » Google Tag Manager » Version: 1.3.1

cpe:2.3:a:gtm4wp:google_tag_manager:1.3.1
Gtm4wp » Google Tag Manager » Version: 1.3.2

cpe:2.3:a:gtm4wp:google_tag_manager:1.3.2
Gtm4wp » Google Tag Manager » Version: 1.4

cpe:2.3:a:gtm4wp:google_tag_manager:1.4
Gtm4wp » Google Tag Manager » Version: 1.5

cpe:2.3:a:gtm4wp:google_tag_manager:1.5
Gtm4wp » Google Tag Manager » Version: 1.5.1

cpe:2.3:a:gtm4wp:google_tag_manager:1.5.1
Gtm4wp » Google Tag Manager » Version: 1.6

cpe:2.3:a:gtm4wp:google_tag_manager:1.6
Gtm4wp » Google Tag Manager » Version: 1.6.1

cpe:2.3:a:gtm4wp:google_tag_manager:1.6.1
Gtm4wp » Google Tag Manager » Version: 1.7

cpe:2.3:a:gtm4wp:google_tag_manager:1.7
Gtm4wp » Google Tag Manager » Version: 1.7.1

cpe:2.3:a:gtm4wp:google_tag_manager:1.7.1
Gtm4wp » Google Tag Manager » Version: 1.7.2

cpe:2.3:a:gtm4wp:google_tag_manager:1.7.2
Gtm4wp » Google Tag Manager » Version: 1.8

cpe:2.3:a:gtm4wp:google_tag_manager:1.8
Gtm4wp » Google Tag Manager » Version: 1.8.1

cpe:2.3:a:gtm4wp:google_tag_manager:1.8.1
Gtm4wp » Google Tag Manager » Version: 1.9

cpe:2.3:a:gtm4wp:google_tag_manager:1.9
Gtm4wp » Google Tag Manager » Version: 1.9.1

cpe:2.3:a:gtm4wp:google_tag_manager:1.9.1
Gtm4wp » Google Tag Manager » Version: 1.9.2

cpe:2.3:a:gtm4wp:google_tag_manager:1.9.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-1961

Products

Pricing

Contact Us