Ptengine Real Time Web Analytics And Heatmap Vulnerabilities

The Ptengine – Heatmap Analytics plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘code’ parameter in versions before 1.0.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute i...

CVSS:

6.1

Affected:

up to 1.0.2

Fixed in:

1.0.2

Disclosed:

Mar 25, 2015

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Update the plugin.

Affected:

up to 1.0.2

Fixed in:

1.0.2

Disclosed:

Mar 25, 2015

The Ptengine – Heatmap Analytics plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘code’ parameter in versions before 1.0.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute i...

Affected:

up to 1.0.2

Fixed in:

1.0.2

Disclosed:

Mar 25, 2015

The ptengine-real-time-web-analytics-and-heatmap WordPress plugin was affected by a Reflected Cross-Site Scripting (XSS) security vulnerability.

Affected:

up to 1.0.2

Fixed in:

1.0.2