Cross-site Scripting Vulnerability in HasThemes HT Easy GA4 (Google Analytics 4) Allows Stored XSS

CVE-2024-29094

What is CVE-2024-29094?

The vulnerability in HT Easy GA4 (Google Analytics 4) from HasThemes is attributed to improper neutralization of input during web page generation. This flaw allows attackers to exploit the application and execute stored cross-site scripting (XSS) attacks. As a result, malicious scripts may be injected into web pages viewed by users, leading to unauthorized access to sensitive information or taking control of user sessions. Ensuring that the affected versions, specifically those from n/a to 1.1.7, are updated promptly is essential for safeguarding against this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References