CVE-2023-46094
High
Description
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Conversios Track Google Analytics 4, Facebook Pixel & Conversions API via Google Tag Manager for WooCommerce plugin <= 6.5.3 versions.
SeverityHigh
CVSS7.1
Exploit probability32. percentile0.4%
ProductConversios Google Analytics Integration For Woocommerce
PublishedOct 26, 2023
First seenOct 26, 2023
Weakness typeCWE-79Cross-site scripting (XSS)
How to fix
Update
- conversios google_analytics_integration_for_woocommerce6.5.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| conversios google_analytics_integration_for_woocommerce | v < 6.5.4 | 6.5.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.