Stored Cross-Site Scripting Vulnerability in Interactive Geo Maps Plugin for WordPress

CVE-2023-0731

What is CVE-2023-0731?

The Interactive Geo Maps plugin for WordPress is susceptible to Stored Cross-Site Scripting due to inadequate input sanitization and output escaping on user-supplied attributes. Authenticated attackers with editor-level permissions or higher can exploit this vulnerability by injecting arbitrary web scripts through the action content parameter. The malicious scripts would execute whenever a user accesses the compromised pages, potentially leading to unauthorized actions or data theft.

References