Lucene search

K
patchstackKrishna Harsha KondaveetiPATCHSTACK:D1D1A30A483215A17F40D14E83B5FFA5
HistoryMay 17, 2022 - 12:00 a.m.

WordPress Google Places Reviews plugin <= 1.5.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

2022-05-1700:00:00
Krishna Harsha Kondaveeti
patchstack.com
2

0.001 Low

EPSS

Percentile

24.9%

Authenticated Stored Cross-Site Scripting (XSS) vulnerability discovered by Krishna Harsha Kondaveeti in WordPress Google Places Reviews plugin (versions <= 1.5.2).

Solution

           Fixed in version 2.0.0, but has been closed as of April 8, 2022 and is not available for download. This closure is temporary, pending a full review. Deactivate and delete.
CPENameOperatorVersion
google places reviewsle1.5.2

0.001 Low

EPSS

Percentile

24.9%

Related for PATCHSTACK:D1D1A30A483215A17F40D14E83B5FFA5