Description
WordPress Google Tag 管理器 WordPress 插件 中存在了一个反射的跨站点脚本漏洞。此漏洞是由于应用程序对站点搜索请求的验证不足导致的。
Wordpress Google Tag 管理器反射型XSS 漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2022-1707
https://www.sentinelone.com/vulnerability-database/cve-2022-1707/
https://wpscan.com/vulnerability/b5384be3-91c0-45e8-ae03-0188be12bc09/
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/duracelltomi-google-tag-manager/google-tag-manager-for-wordpress-gtm4wp-1151-stored-cross-site-scripting-via-content-element-id
https://patchstack.com/database/wordpress/plugin/duracelltomi-google-tag-manager/vulnerability/wordpress-gtm4wp-plugin-1-15-1-authenticated-stored-cross-site-scripting-xss-vulnerability
https://www.acunetix.com/vulnerabilities/web/wordpress-plugin-vdz-google-analytics-or-google-tag-manager-gtm-cross-site-scripting-1-5-5/