Google Analytics Top Content Widget Plugin Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability has been identified in the Google Analytics Top Content Widget Plugin for WordPress, affecting versions prior to 1.5.6. The issue arises from an unknown functionality in the file class-tgm-plugin-activation.php, allowing remote attackers to inject malicious scripts.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Remediation

Users are advised to upgrade to Google Analytics Top Content Widget Plugin version 1.5.7, which addresses this vulnerability.