Skip to content
Sign in
7.1 High

CVE-2024-29094 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasThemes HT…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasThemes HT Easy GA4 ( Google Analytics 4 ) allows Stored XSS.This issue affects HT Easy GA4 ( Google Analytics 4 ): from n/a through 1.1.7.

Affected products and versions

Product Affected versions Fixed in
HT Easy GA4 ( Google Analytics 4 ) 1.1 earliest → 1.1.7 No fix stated

Other CVEs of HT Easy GA4 ( Google Analytics 4 )

The 2 CVEs of HT Easy GA4 ( Google Analytics 4 ) →
CVE-2023-23802 Cross-Site Request Forgery (CSRF) vulnerability in HasThemes HT Easy GA4 ( Google Analytics 4 ) plugin <= 1.0.6 versions 4.3 Medium
Track this CVE