WP Google Maps < 9.0.48 - Unauthenticated Stored XSS
58Vexday Risk Score
Corrige ahora. Ella explotación observada por VulnCheck y tiene exploit funcional público.
ssvc Actcvss 8.8epss 1.8%
de la publicación al arma
Publicada en NVD11 nov
VulnCheck+174d
probabilidad de explotación
1.8%top 23% de las CVE
explotación observada
síVulnCheck
The WP Go Maps (formerly WP Google Maps) WordPress plugin before 9.0.48 does not sanitize user input provided via an AJAX action, allowing unauthenticated users to store XSS payloads which are later retrieved from another AJAX call and output unescaped.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Productos afectados
Unknown · WP Go Maps (formerly WP Google Maps)