Skip to content
OpenAdvisories
High · 7.1 CVE-2024-29094 EUVD-2024-26133GHSA-h385-vvhp-wmmp

WordPress HT Easy GA4 plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability

Published Mar 19, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: HasThemes Product: HT Easy GA4 ( Google Analytics 4 )

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasThemes HT Easy GA4 ( Google Analytics 4 ) allows Stored XSS.This issue affects HT Easy GA4 ( Google Analytics 4 ): from n/a through 1.1.7.

Affected products

VendorProductAffectedFixed
HasThemes HT Easy GA4 ( Google Analytics 4 ) ≤ 1.1.7 —

References