Stored XSS via Google Analytics ID after updating Google Analytics Script

• Type: Regression Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: 7.0.0 M3
• Fix Version/s: 6.2.3 CE GA4, 6.2.X EE, 7.0.0 M4
• Component/s: SEO Tools > OpenGraph tags, WCM
• Labels:
  • liferay-fixpack-portal-40-6210
• Branch Version/s:
  6.2.x
• Backported to Branch:
  Committed
• Story Points: 15
• Fix Priority: 3
• Git Pull Request: https://github.com/brianchandotcom/liferay-portal/pull/23923

Steps to reproduce:
1, Go to Site Settings in Control Panel
2, Enter this Google Analytics ID:

</script><script>alert(/googleAnalyticsId/);</script>

3, Go to the site

Expected result: no pop-up
Actual result: a pop-up appears

---

CVSS Base Score: 7.1
CVSS Temporal Score: 5.6
CVSS Vector: (AV:N/AC:H/Au:S/C:C/I:C/A:C/E:P/RL:OF/RC:C)