VDB
CVE-2024-32145
CVE-2024-32145
PUBLISHED
CVSS 7.099999904632568 HIGH
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PineWise WP Google Analytics Events allows Reflected XSS.This issue affects WP Google Analytics Events: from n/a through 2.8.0.
EPSS 0.35% · 28.7th percentile
Risk Scores
CVSS 3.1
7.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
EPSS Score
0.35%
28.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| wpgoaltracker | wp_google_analytics_events | 0 |
| PineWise | WP Google Analytics Events | n/a |
Timeline
- Apr 15, 2024 EPSS Score
- Apr 15, 2024 CVE Published
- May 10, 2024 EPSS Score
- Jun 4, 2024 EPSS Score
- Jul 1, 2024 EPSS Score
- Aug 20, 2024 EPSS Score
- Sep 14, 2024 EPSS Score
- Oct 4, 2024 Coalition ESS Score
- Oct 9, 2024 EPSS Score
- Nov 3, 2024 EPSS Score
- Nov 29, 2024 EPSS Score
- Dec 25, 2024 EPSS Score