Lucene search
K

178 matches found

Cvelist
Cvelist
added 2025/03/03 1:30 p.m.10 views

CVE-2025-23517 WordPress Google Map on Post/Page plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sunil chaulagain Google Map on Post/Page google-map-on-postpage allows Reflected XSS.This issue affects Google Map on Post/Page: from n/a through = 1.1...

7.1CVSS0.00112EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/03/03 12:0 a.m.1 views

WordPress plugin Google Map on Post/Page 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS5.9AI score0.00112EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/02/17 10:20 a.m.4 views

WordPress WP Google Map plugin < 1.9.4 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin WP Google Map versions 1.9.4...

4.3CVSS6.1AI score0.00045EPSS
Exploits1References1Affected Software1
Patchstack
Patchstack
added 2025/01/16 6:42 p.m.3 views

WordPress RSV GMaps plugin <= 1.5 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin RSV GMaps versions = 1.5...

7.1CVSS6.2AI score0.00055EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2025/01/16 6:41 p.m.2 views

WordPress Google Map on Post/Page plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Google Map on Post/Page versions = 1.1...

7.1CVSS6.1AI score0.00112EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/11/08 12:0 a.m.5 views

WordPress Location Click Map Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software Location Click Map Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51844 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 2c5aeb1a3280 Credits LVT-tholv2k Required privilege...

6.5CVSS6.9AI score0.00295EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2024/10/30 3:15 a.m.18 views

CVE-2024-9886

The WP Baidu Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'baidumap' shortcode in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS0.00233EPSS
Exploits0References3
Patchstack
Patchstack
added 2024/07/01 12:0 a.m.13 views

WordPress WP Google Map Plugin Plugin <= 4.6.1 is vulnerable to SQL Injection

Software WP Google Map Plugin Type Plugin Vulnerable versions = 4.6.1 Fixed in 4.6.2 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-2386 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 6fa4ba8a185e Credits Krzysztof Zając Required privilege Contributo...

8.8CVSS6.8AI score0.00412EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2024/06/12 12:0 a.m.2 views

PT-2024-13181 · WordPress · Wp Gpx Map

Name of the Vulnerable Software and Affected Versions: WP GPX Map versions 1.7.08 and earlier Description: A Missing Authorization issue has been identified. This issue affects the WP GPX Map plugin. Recommendations: For WP GPX Map versions 1.7.08 and earlier, update to a version that contains a...

4.3CVSS8.7AI score0.00174EPSS
Exploits0References3
NVD
NVD
added 2023/11/22 10:15 p.m.8 views

CVE-2023-47767

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fla-shop.Com Interactive World Map plugin = 3.2.0 versions...

7.1CVSS0.00087EPSS
Exploits0References1
OSV
OSV
added 2023/11/22 10:15 p.m.2 views

CVE-2023-47767

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fla-shop.Com Interactive World Map plugin = 3.2.0 versions...

6.1CVSS7.3AI score0.00087EPSS
Exploits0References1
OSV
OSV
added 2023/11/08 7:15 p.m.2 views

CVE-2023-47223

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WP Map Plugins Basic Interactive World Map plugin = 2.0 versions...

4.8CVSS7.3AI score
Exploits0References1
Prion
Prion
added 2023/11/08 7:15 p.m.15 views

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WP Map Plugins Basic Interactive World Map plugin = 2.0 versions...

4.3CVSS5.8AI score0.00127EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/08 6:29 p.m.18 views

CVE-2023-47223 WordPress Basic Interactive World Map Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WP Map Plugins Basic Interactive World Map plugin = 2.0 versions...

5.9CVSS5.1AI score0.00127EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/11/08 12:0 a.m.1 views

WordPress Plugin Basic Interactive World Map Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...

4.8CVSS6AI score0.00127EPSS
Exploits0References3
Patchstack
Patchstack
added 2023/11/03 12:0 a.m.11 views

WordPress Basic Interactive World Map Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

Software Basic Interactive World Map Type Plugin Vulnerable versions = 2.0 Fixed in 2.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-47223 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 49944254b130 Credits DoYeon Park p6rkdoye0n Require...

4.8CVSS6.6AI score0.00127EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2023/10/25 6:17 p.m.1 views

CVE-2023-46190

Cross-Site Request Forgery CSRF vulnerability in Novo-media Novo-Map : your WP posts on custom google maps plugin = 1.1.2 versions...

8.8CVSS7.3AI score
Exploits0References1
OSV
OSV
added 2023/10/20 7:15 a.m.1 views

CVE-2023-5050

The Leaflet Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 3.3.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with contributor level and above permissions to...

5.4CVSS6.8AI score0.00193EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/10/20 12:0 a.m.2 views

WordPress Plugin Leaflet Map Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

6.4CVSS6AI score0.00193EPSS
Exploits0References4
NVD
NVD
added 2023/10/18 9:15 a.m.16 views

CVE-2023-45056

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in 100plugins Open User Map plugin = 1.3.26 versions...

5.9CVSS5.4AI score0.00063EPSS
Exploits0References1
Rows per page
Query Builder