CVE-2022-1123CWE-89

CVE-2022-1123: vulnerability in Leaflet Maps Marker (Google Maps…

Leaflet Maps Marker < 3.12.5 - Admin+ SQLi

Published · Updated

Follow this CVE+ Monitor Leaflet Maps Marker

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.4%
The Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) WordPress plugin before 3.12.5 does not properly sanitize some parameters before inserting them into SQL queries. As a result, high privilege users could perform SQL injection attacks.
Affected products
Unknown · Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps)
Related CVEs — Leaflet Maps Marker (Google Maps…

In the same product, most dangerous first.

CVE-2022-4677MEDIUMLeaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) < 3.12.7 - Contributor+ Stored XSS via ShortcodeEPSS 0.6%