Lucene search

K
patchstackVinay Varma Mudunuri, Krishna Harsha KondaveetiPATCHSTACK:98E0A4CED8DC058CE563EFE4DC33C681
HistoryJul 18, 2022 - 12:00 a.m.

WordPress Google Maps Anywhere plugin <= 1.2.6.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

2022-07-1800:00:00
Vinay Varma Mudunuri, Krishna Harsha Kondaveeti
patchstack.com
5

0.001 Low

EPSS

Percentile

24.9%

Authenticated Stored Cross-Site Scripting (XSS) vulnerability discovered by Vinay Varma Mudunuri, Krishna Harsha Kondaveeti in WordPress Google Maps Anywhere plugin (versions <= 1.2.6.3).

Solution

Deactivate and delete. This plugin has been closed as of July 15, 2022 and is not available for download. This closure is temporary, pending a full review.

CPENameOperatorVersion
google maps anywherele1.2.6.3

0.001 Low

EPSS

Percentile

24.9%

Related for PATCHSTACK:98E0A4CED8DC058CE563EFE4DC33C681