Stored XSS in Google Analytics by Yoast Premium allows privileged users to attack other users (WordPress plugin)

Posted by dxw Security on Aug 12

Details
================
Software: Google Analytics by Yoast Premium
Version: 5.4.4
Homepage: https://yoast.com/wordpress/plugins/google-analytics/
Advisory report: https://security.dxw.com/advisories/xss-in-google-analytics-by-yoast-premium-by-privileged-users/
CVE: Awaiting assignment
CVSS: 5.5 (Medium; AV:N/AC:L/Au:S/C:P/I:P/A:N)

Description
================
Stored XSS in Google Analytics by Yoast Premium allows privileged users to attack…