WP Google Maps < 8.1.12 - Authenticated Stored Cross-Site Scripting (XSS)
CVE-2021-24383

5.4MEDIUM

Key Information:

Vendor
Wordpress
Status
WP Google Maps
Vendor
CVE Published:
21 June 2021

Summary

The WP Google Maps WordPress plugin before 8.1.12 did not sanitise, validate of escape the Map Name when output in the Map List of the admin dashboard, leading to an authenticated Stored Cross-Site Scripting issue

Affected Version(s)

WP Google Maps 8.1.12

References

https://wpscan.com/vulnerability/1270588c-53fe-447e-b83c-...
x_refsource_CONFIRM
http://packetstormsecurity.com/files/163261/WordPress-WP-...
x_refsource_MISC

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mohammed Adam
.