Skip to content
OpenAdvisories
High · 7.1 CVE-2023-46094 EUVD-2023-50355GHSA-4378-f9mm-5685

WordPress Conversios.io Plugin <= 6.5.3 is vulnerable to Cross Site Scripting (XSS)

Published Oct 26, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Conversios Product: Track Google Analytics 4, Facebook Pixel & Conversions API via Google Tag Manager for WooCommerce Category: Web / CMS

Description

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Conversios Track Google Analytics 4, Facebook Pixel & Conversions API via Google Tag Manager for WooCommerce plugin <= 6.5.3 versions.

Affected products

VendorProductAffectedFixed
Conversios Track Google Analytics 4, Facebook Pixel & Conversions API via Google Tag Manager for WooCommerce ≤ 6.5.3 —

References