CVE-2022-3904

Published: 2023-01-16T16:15Z

Last Modified: 2025-04-08T20:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

The MonsterInsights WordPress plugin before 8.9.1 does not sanitize or escape page titles in the top posts/pages section, allowing an unauthenticated attacker to inject arbitrary web scripts into the titles by spoofing requests to google analytics. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt