WordPress Maps Widget for Google Maps Plugin <= 4.24 is vulnerable to Cross Site Scripting (XSS)

🗓️ 07 Apr 2023 00:00:00Reported by Marco WotschkaType

WordPress Maps Widget for Google Maps Plugin <= 4.24 vulnerable to Cross Site Scripting (XSS). Low severity. Fixed in 4.2

Reporter	Title	Published	Views	Family All 6
Prion	Cross site scripting	6 Apr 202315:15	–	prion
CVE	CVE-2023-1913	6 Apr 202315:15	–	cve
WPVulnDB	Maps Widget for Google Maps < 4.25 - Admin+ Stored XSS	6 Apr 202300:00	–	wpvulndb
NVD	CVE-2023-1913	6 Apr 202315:15	–	nvd
Cvelist	CVE-2023-1913	6 Apr 202314:51	–	cvelist
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (Apr 3, 2023 to Apr 9, 2023)	13 Apr 202312:03	–	wordfence

Vulners

Node

webfactory_ltd maps_widget_for_google_mapsRange≤4.24

Source	Link
wordpress	www.wordpress.org/plugins/google-maps-widget/
cve	www.cve.org/CVERecord
wordfence	www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/google-maps-widget/maps-widget-for-google-maps-424-authenticated-administrator-stored-cross-site-scripting

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

07 Apr 2023 00:00Current

6.0Medium risk

Vulners AI Score6.0

CVSS34.8