Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-55662
HistoryJun 22, 2022 - 12:00 a.m.

WordPress plugin Inline Google Maps cross-site request forgery vulnerability

2022-06-2200:00:00
China National Vulnerability Database
www.cnvd.org.cn
11

0.001 Low

EPSS

Percentile

26.4%

WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blogging sites on servers with PHP and MySQL. WordPress plugin Inline Google Maps 5.11 and earlier versions are vulnerable to cross-site request forgery, which stems from not performing CSRF checks when updating its settings. An attacker could exploit the vulnerability through a CSRF attack to allow logged-in administrators to change them and sanitize and escape due to a lack of stored cross-site scripting.

0.001 Low

EPSS

Percentile

26.4%