CVE-2019-19134

The Hero Maps Premium plugin 2.2.1 and prior for WordPress is prone to unauthenticated XSS via the views/dashboard/index.php p parameter because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to inject HTML or arbitrary JavaScript within the browser of ...

PT-2020-10061

Name of the Vulnerable Software and Affected Versions Hero Maps Premium plugin versions 2.2.1 and prior Description The issue is related to insufficient sanitization of user-supplied input, leading to unauthenticated XSS. An attacker can inject HTML or arbitrary JavaScript within the browser of a...