CVE-2024-11827

The Out of the Block: OpenStreetMap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ootbquery shortcode in all versions up to, and including, 2.8.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-11827

creationtimestamp| type| source ---|---|--- 2024-12-13 11:30:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113645285931949683 2024-12-13 14:06:05+00:00| seen| https://t.me/cvedetector/12866...

CVE-2024-11827

CVE-2024-11827 affects the OpenStreetMap plugin for WordPress (Out of the Block). The vulnerability is a Stored Cross‑Site Scripting in the ootb_query shortcode caused by insufficient input sanitization and output escaping on user-supplied attributes, exploitable by authenticated users with contr...