817 matches found
CVE-2018-9020
The Events Manager plugin before 5.8.1.2 for WordPress allows XSS via the events-manager.js mapTitle parameter in the Google Maps miniature...
CVE-2018-9020
The Events Manager plugin before 5.8.1.2 for WordPress allows XSS via the events-manager.js mapTitle parameter in the Google Maps miniature...
CVE-2018-9020
The CVE-2018-9020 entry concerns the WordPress Events Manager plugin (pre-5.8.1.2). Concrete detail: an XSS vulnerability arises via the events-manager.js mapTitle parameter in the Google Maps miniature, due to lack of proper escaping. This affects the Events Manager plugin for WordPress; exploit...
PT-2018-18784 · WordPress · Events Manager
Name of the Vulnerable Software and Affected Versions: Events Manager plugin versions prior to 5.8.1.2 Description: The issue allows for XSS via the mapTitle parameter in the Google Maps miniature within the events-manager.js file. Recommendations: For versions prior to 5.8.1.2, update to version...
Events Manager <= 5.8.1.1 - Unauthenticated Stored XSS
An unauthenticated user or a user without privileges, who can submit an event, can inject javascript code in the Google Maps miniature. The malicious code runs in the admin panel when a user with privileges opens the submitted event. The problem is in the file events-manager.js, the variable...
Google Maps by Reumer, 3.5, Malicious update
Google Maps by Reumer, from mapsplugin.com, version 3.5, malicious update Version 3.3 of this plugin is listed in the JED and appears to be clean. However once installed, the Joomla update manager prompts you to update this extension to a version 3.5 which is not officially published. This versio...
Googlemaps Plugin Denial of Service Vulnerability in Joomla!
Joomla! is the U.S. Open Source Matters development team developed a set of open source content management system CMS, it provides RSS feeds, site search and other features. Googlemaps is one of the set of Google Maps plug-ins. A security vulnerability exists in the Joomla! Googlemaps plugin that...
Google Maps Plugin Cross-Site Scripting Vulnerability in Joomla!
Joomla! Google Maps is a Joomla! module or component that displays Google Maps on one or more content pages. A cross-site scripting vulnerability in the Joomla! Google Maps plugin allows remote attackers to inject arbitrary web script or HTML via xmlns parameters...
PT-2017-5754 · Joomla · Joomla! Googlemaps Plugin
Name of the Vulnerable Software and Affected Versions: Joomla! Googlemaps plugin versions prior to 3.1 Description: The issue allows remote attackers to bypass an intended protection mechanism. Recommendations: For versions prior to 3.1, update to version 3.1 or later to resolve the issue...
PT-2017-5752 · Joomla · Joomla! Googlemaps Plugin
Name of the Vulnerable Software and Affected Versions: Joomla! Googlemaps plugin versions prior to 3.1 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the xmlns parameter. This could potentially lead to unauthorized actions on the...
Web-based OSINT and Active Reconnaissance Suite: D0xk1t
Active reconnaissance, information gathering and OSINT built in a portable web application. D0xk1t is an open-source , self-hosted and easy to use OSINT and active reconnaissance web application for penetration testers. Based off of the prior command-line script, D0xk1t is now fully capable of...
Google Map Store Locator by Matamko,4.0,SQL Injection
Google Map Store Locator by Matamko, 4.0, SQL Injection...
Location Map - Moderately Critical - Multiple vulnerabilities - SA-CONTRIB-2017-026
This module enables you to display one simple location map via Google Maps. The module doesn't sufficiently sanitize user input in the configuration text fields of the module allows any tags and does not respect text format configuration. This vulnerability is mitigated by the fact that an attack...
mycollingwood.ca XSS vulnerability
Open Bug Bounty ID: OBB-203457 Description| Value ---|--- Affected Website:| mycollingwood.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Fedora Update for trytond-google-maps FEDORA-2016-d961441913
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
WordPress Google Maps Plugin Cross-Site Request Forgery Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on servers with PHP and MySQL.Google Maps is one of the map plug-ins. A cross-site request forgery vulnerability exists in the admin.jsp pag...
WordPress Google Maps 6.3.14 Cross Site Request Forgery Vulnerability
WordPress Google Maps plugin version 6.3.14 suffers from a cross site request forgery vulnerability. ------------------------------------------------------------------------ Persistent Cross-Site Scripting in WP Google Maps Plugin via CSRF...
WordPress Google Maps 6.3.14 Cross Site Request Forgery
------------------------------------------------------------------------ Persistent Cross-Site Scripting in WP Google Maps Plugin via CSRF ------------------------------------------------------------------------ Sipke Mellema, July 2016...
WP Google Maps <= 6.3.14 - Authenticated Stored Cross-Site Scripting (XSS) via CSRF
The WP Google Maps WordPress plugin was affected by an Authenticated Stored Cross-Site Scripting XSS via CSRF security vulnerability...