DuracellTomi's Google Tag Manager for WordPress - Version 1.15.2

Version Description

  • Fixed: Stored XSS when using the scroll tracking feature and an admin changes the content element ID into a JavaScript code.

Full scan of the plugin is also in works to fix any other possible XSS issues.

Download this release

Release Info

Developer duracelltomi
Plugin Icon 128x128 DuracellTomi's Google Tag Manager for WordPress
Version 1.15.2
Comparing to
See all releases

Code changes from version 1.15.1 to 1.15.2

Files changed (3) hide show
  1. duracelltomi-google-tag-manager-for-wordpress.php +2 -2
  2. public/frontend.php +1 -1
  3. readme.txt +16 -2
duracelltomi-google-tag-manager-for-wordpress.php CHANGED
@@ -11,7 +11,7 @@
11
  * Plugin Name: GTM4WP
12
  * Plugin URI: https://gtm4wp.com/
13
  * Description: The first Google Tag Manager plugin for WordPress with business goals in mind
14
- * Version: 1.15.1
15
  * Requires at least: 3.4.0
16
  * Requires PHP: 5.6
17
  * Author: Thomas Geiger
@@ -25,7 +25,7 @@
25
  * WC tested up to: 6.3.1
26
  */
27
 
28
- define( 'GTM4WP_VERSION', '1.15.1' );
29
  define( 'GTM4WP_PATH', plugin_dir_path( __FILE__ ) );
30
 
31
  global $gtp4wp_plugin_url, $gtp4wp_plugin_basename;
11
  * Plugin Name: GTM4WP
12
  * Plugin URI: https://gtm4wp.com/
13
  * Description: The first Google Tag Manager plugin for WordPress with business goals in mind
14
+ * Version: 1.15.2
15
  * Requires at least: 3.4.0
16
  * Requires PHP: 5.6
17
  * Author: Thomas Geiger
25
  * WC tested up to: 6.3.1
26
  */
27
 
28
+ define( 'GTM4WP_VERSION', '1.15.2' );
29
  define( 'GTM4WP_PATH', plugin_dir_path( __FILE__ ) );
30
 
31
  global $gtp4wp_plugin_url, $gtp4wp_plugin_basename;
public/frontend.php CHANGED
@@ -714,7 +714,7 @@ function gtm4wp_wp_header_top( $echo = true ) {
714
  var gtm4wp_scrollerscript_debugmode = ' . ( $gtm4wp_options[ GTM4WP_OPTION_SCROLLER_DEBUGMODE ] ? 'true' : 'false' ) . ';
715
  var gtm4wp_scrollerscript_callbacktime = ' . (int) $gtm4wp_options[ GTM4WP_OPTION_SCROLLER_CALLBACKTIME ] . ';
716
  var gtm4wp_scrollerscript_readerlocation = ' . (int) $gtm4wp_options[ GTM4WP_OPTION_SCROLLER_DISTANCE ] . ';
717
- var gtm4wp_scrollerscript_contentelementid = "' . $gtm4wp_options[ GTM4WP_OPTION_SCROLLER_CONTENTID ] . '";
718
  var gtm4wp_scrollerscript_scannertime = ' . (int) $gtm4wp_options[ GTM4WP_OPTION_SCROLLER_READERTIME ] . ';';
719
  }
720
 
714
  var gtm4wp_scrollerscript_debugmode = ' . ( $gtm4wp_options[ GTM4WP_OPTION_SCROLLER_DEBUGMODE ] ? 'true' : 'false' ) . ';
715
  var gtm4wp_scrollerscript_callbacktime = ' . (int) $gtm4wp_options[ GTM4WP_OPTION_SCROLLER_CALLBACKTIME ] . ';
716
  var gtm4wp_scrollerscript_readerlocation = ' . (int) $gtm4wp_options[ GTM4WP_OPTION_SCROLLER_DISTANCE ] . ';
717
+ var gtm4wp_scrollerscript_contentelementid = "' . esc_js( $gtm4wp_options[ GTM4WP_OPTION_SCROLLER_CONTENTID ] ) . '";
718
  var gtm4wp_scrollerscript_scannertime = ' . (int) $gtm4wp_options[ GTM4WP_OPTION_SCROLLER_READERTIME ] . ';';
719
  }
720
 
readme.txt CHANGED
@@ -4,8 +4,8 @@ Donate link: https://gtm4wp.com/
4
  Tags: google tag manager, tag manager, gtm, google, adwords, google adwords, google ads, adwords remarketing, google ads remarketing, remarketing, google analytics, analytics, facebook ads, facebook remarketing, facebook pixel, google optimize, personalisation
5
  Requires at least: 3.4.0
6
  Requires PHP: 5.6
7
- Tested up to: 5.9.3
8
- Stable tag: 1.15.1
9
  License: GPLv3
10
  License URI: http://www.gnu.org/licenses/gpl.html
11
 
@@ -235,6 +235,12 @@ https://gtm4wp.com/how-to-articles/how-to-exclude-admin-users-from-being-tracked
235
 
236
  == Changelog ==
237
 
 
 
 
 
 
 
238
  = 1.15.1 =
239
 
240
  * Fixed: JavaScript error with the newly added console logging to debug code placement issues
@@ -780,6 +786,14 @@ Please report all bugs found in my plugin using the [contact form on my website]
780
 
781
  == Upgrade Notice ==
782
 
 
 
 
 
 
 
 
 
783
  = 1.15 =
784
 
785
  Various updates, fixes and improvements
4
  Tags: google tag manager, tag manager, gtm, google, adwords, google adwords, google ads, adwords remarketing, google ads remarketing, remarketing, google analytics, analytics, facebook ads, facebook remarketing, facebook pixel, google optimize, personalisation
5
  Requires at least: 3.4.0
6
  Requires PHP: 5.6
7
+ Tested up to: 6.0.0
8
+ Stable tag: 1.15.2
9
  License: GPLv3
10
  License URI: http://www.gnu.org/licenses/gpl.html
11
 
235
 
236
  == Changelog ==
237
 
238
+ = 1.15.2 =
239
+
240
+ * Fixed: Stored XSS when using the scroll tracking feature and an admin changes the content element ID into a JavaScript code.
241
+
242
+ Full scan of the plugin is also in works to fix any other possible XSS issues.
243
+
244
  = 1.15.1 =
245
 
246
  * Fixed: JavaScript error with the newly added console logging to debug code placement issues
786
 
787
  == Upgrade Notice ==
788
 
789
+ = 1.15.2 =
790
+
791
+ Bugfix release
792
+
793
+ = 1.15.1 =
794
+
795
+ Bugfix release
796
+
797
  = 1.15 =
798
 
799
  Various updates, fixes and improvements