Description The universal-analytics plugin before 1.3.1 for WordPress has XSS. References https://wordpress.org/plugins/universal-analytics/#developers