WordPress Mapster WP Maps Plugin <= 1.6.0 is vulnerable to Cross Site Scripting (XSS)

Software Mapster WP Maps Type Plugin Vulnerable versions = 1.6.0 Fixed in 1.7.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10592 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 20e96f022c15 Credits Akbar Kustirama Require...

CVE-2024-10592

creationtimestamp| type| source ---|---|--- 2024-11-16 09:40:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113491970826892267 2024-11-16 11:53:20+00:00| seen| https://t.me/cvedetector/11231 2024-11-18 20:35:47+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9074...

CVE-2024-10592 Mapster WP Maps <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Mapster WP Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the popup class parameter in all versions up to, and including, 1.6.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

CVE-2024-10592 Mapster WP Maps <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Mapster WP Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the popup class parameter in all versions up to, and including, 1.6.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...