Analytify <4.2.1 - Cross-Site Scripting
WordPress Analytify 4.2.1 does not escape the current URL before outputting it back in a 404 page when the 404 tracking feature is enabled, leading to reflected cross-site scripting.
wp-analytifyPoC 已收录
CVSS5.4