Stored Cross-Site Scripting Vulnerability in WP Go Maps Plugin

CVE-2024-1582

What is CVE-2024-1582?

The WP Go Maps plugin for WordPress is susceptible to a stored cross-site scripting vulnerability that arises from inadequate input sanitization and output escaping on user-supplied attributes. Authenticated attackers with contributor-level permissions or higher can exploit the 'wpgmza' shortcode to inject arbitrary web scripts into pages. This injected code executes whenever any user accesses the affected page, posing serious security risks. Users are encouraged to update to the latest version to mitigate this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References