Google Patches XSS Vulnerability in Website Optimizer
If you are a Website Optimizer issue, you should immediately update the code on your website with the new one provided by Google. Google has fixed a Cross-Site Scripting (XSS) bug in their control script which can allow an attacker to execute malicious code on your site.
However, according to Google this attack is only possible if your website or browser has been compromised by a separate attack. Google has sent out notes to all users about the issue with instructions on how to update your code. Make sure to do the changes immediately.
Website Optimizer is a part of Google Analytics, however, no other services in Analytics seem to have been affected by this.
Comment Using Facebook
One Response to this Article | Share your Opinions/Comments
We moderate comments to prevent spam. Moderation is done within few hours. Please try and stay on topic and refrain from using abusive language. If you think there is a problem with this post, please email the post author or send us an email at tips@techie-buzz.com with the URL and the problem you see and we will rectify it as soon as we can.


Keith,
Thanks for the update. Your readers may be interested in a simple Google Optimizer Code checker at
http://www.observepoint.com/optimizer-test.php
You just enter the URL of the page in question, and it will tell you whether the google website optimizer code is up-to-date, and if it needs to be edited, it will tell you what to change and where to change it.