CVE-2021-24383

WP Google Maps < 8.1.12 - Authenticated Stored Cross-Site Scripting (XSS)

EPSS 2.3%CWE-79

The WP Google Maps WordPress plugin before 8.1.12 did not sanitise, validate of escape the Map Name when output in the Map List of the admin dashboard, leading to an authenticated Stored Cross-Site Scripting issue

Productos afectados

WP Google Maps · WP Google Maps

PoCs públicas encontradas — 2

cve_referencepacketstormsecurity.com/files/163261/WordPress-WP-Google-Maps-8.1.11-Cross-Site-Scripting.htmlno verificado exploitdbwww.exploit-db.com/exploits/50051no verificado

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://packetstormsecurity.com/files/163261/WordPress-WP-Google-Maps-8.1.11-Cross-Site-Scripting.html https://wpscan.com/vulnerability/1270588c-53fe-447e-b83c-1b877dc7a954