QA Analytics

QA Analytics: The CVSS vector permits an unauthenticated attacker. Attacker-controlled content is stored and later rendered without adequate neutralization, allowing script to execute in the affected site origin when a user views the output. The export does not identify the victim role, storage field or rendering function. The authoritative export does not name the vulnerable endpoint, request action, parameter or implementation function. Published affected versions: <= 5.3.0.1.

The supplied vector requires no attacker account. Information is exposed to an unauthorized recipient through component output. The export does not identify the endpoint, parameter, data fields, output channel or producing function; disclosure of particular credentials or personal records is not established. No victim interaction is required by the vector. The vector reports limited confidentiality impact, no integrity impact, no availability impact. Affected versions: <= 5.3.0.0. The authoritative export identifies 5.3.0.1 as fixed for this CVE.

QA Analytics through 5.2.0.0 lets an unauthenticated attacker reach a file-write path used for visitor analytics and session data. Affected code writes that data into generated .php files with WP_Filesystem::put_contents(); requesting a generated file can therefore execute stored PHP. Version 5.2.0.1 routes these writes through wrap_put_contents(), prefixing each generated file with an immediate 404 and exit guard.

QA Analytics – Web Analytics Tool with Heatmaps & Session Replay Across All Pages is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.