CVE-2022-0208: fallo en MapPress Maps for WordPress
MapPress Maps for WordPress < 2.73.4 - Reflected Cross-Site scripting
Publicada el · Actualizada el
18Vexday Risk Score
Corrige pronto. Ella tiene exploit funcional público.
ssvc Attendepss 2.0%
probabilidad de explotación
2.0%top 19% de las CVE
explotación observada
noninguna fuente lo reporta
The MapPress Maps for WordPress plugin before 2.73.4 does not sanitise and escape the mapid parameter before outputting it back in the "Bad mapid" error message, leading to a Reflected Cross-Site Scripting
Productos afectados
Unknown · MapPress Maps for WordPressCVEs relacionadas — MapPress Maps for WordPress
En el mismo producto, de las más peligrosas a las menos.
CVE-2022-0537—MapPress Maps for WordPress < 2.73.13 - Admin+ File Upload to Remote Code ExecutionEPSS 1.5%CVE-2024-0421MEDIUMMapPress Maps for WordPress < 2.88.16 - Unauthenticated Arbitrary Private/Draft Post DisclosureEPSS 0.6%CVE-2025-2055MEDIUMMapPress Maps for WordPress < 2.94.9 - Contributor+ Stored XSSEPSS 0.5%CVE-2024-0420MEDIUMMapPress Maps for WordPress < 2.88.15 - Contributor+ Stored XSSEPSS 0.5%CVE-2025-2162MEDIUMMapPress Maps for WordPress < 2.94.10 - Admin+ Stored XSSEPSS 0.4%CVE-2024-8620MEDIUMMapPress Maps for WordPress < 2.93 - Admin+ Stored XSS via Map SettingsEPSS 0.3%