CVE-2021-24468
Leaflet Map < 3.0.0 - Contributor+ Stored XSS
The Leaflet Map WordPress plugin before 3.0.0 does not escape some shortcode attributes before they are used in JavaScript code or HTML, which could allow users with a role as low as Contributors to exploit stored XSS issues
Affected products
Unknown · Leaflet MapWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →