Google Analytics Dashboard WordPress Plugin Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability has been identified in the Google Analytics Dashboard WordPress Plugin, specifically in version 2.1.1. This vulnerability allows remote attackers to inject malicious scripts, which could be executed in the context of the user's browser. Exploitation requires tricking a logged-in WordPress Administrator into visiting a malicious website.

Impact

Exploitation of this vulnerability could lead to cross-site scripting, allowing attackers to steal session tokens from Administrators or perform actions on their behalf.