WordPress 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on PHP and MySQL servers.WordPress Plugin is an open source application plugin for WordPress. WordPress Plugin A cross-site scripting...

PT-2021-21383 · WordPress · Wp Google Maps

Name of the Vulnerable Software and Affected Versions: WordPress WP Google Maps plugin versions = 8.1.12 Description: The issue concerns multiple authenticated persistent Cross-Site Scripting XSS vulnerabilities. Vulnerable parameters include &dataset name, &wpgmza gdpr retention purpose, &wpgmza...

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress WP Google Map Plugin versions prior to 1.7.7, which...

WordPress 跨站脚本漏洞

WordPress is a set of open source blogging platforms developed using the PHP language by the WordPress Foundation. A stored cross-site scripting vulnerability exists in the WordPress WP Google Maps plugin. An attacker can exploit this vulnerability to execute client-side code by injecting...

Cross site scripting

The bws-google-maps plugin before 1.3.6 for WordPress has multiple XSS issues...

WordPress WP Google Maps Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wp-google-maps plugin is a Google Maps plugin used in it. A cross-site scripting vulnerability exists in WordPress WP...

WordPress wp-google-maps plugin input validation error vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wp-google-maps plugin is a Google Maps plugin used in it. An input validation error vulnerability exists in the...

CVE-2019-10692

In the wp-google-maps plugin before 7.11.18 for WordPress, includes/class.rest-api.php in the REST API does not sanitize field names before a SELECT statement. Recent assessments: rootOptional at March 09, 2020 9:03pm UTC reported: This CVE is fairly obscure due to it being present in the WordPre...

CVE-2019-9912

The wp-google-maps plugin before 7.10.43 for WordPress has XSS via the wp-admin/admin.php PATHINFO...

WP Google Maps Cross-Site Scripting Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the wp-admin/admin.php file in versions of the WordPress...

WordPress plugin "WP Google Map Plugin" vulnerable to cross-site scripting

Overview The WordPress plugin "WP Google Map Plugin" provided by Flipper Code contains a reflected cross-site scripting vulnerability CWE-79. Chris Liu reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An...

Googlemaps Plugin Denial of Service Vulnerability in Joomla!

Joomla! is the U.S. Open Source Matters development team developed a set of open source content management system CMS, it provides RSS feeds, site search and other features. Googlemaps is one of the set of Google Maps plug-ins. A security vulnerability exists in the Joomla! Googlemaps plugin that...

PT-2017-5752 · Joomla · Joomla! Googlemaps Plugin

Name of the Vulnerable Software and Affected Versions: Joomla! Googlemaps plugin versions prior to 3.1 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the xmlns parameter. This could potentially lead to unauthorized actions on the...

WordPress Google Maps Plugin Cross-Site Request Forgery Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on servers with PHP and MySQL.Google Maps is one of the map plug-ins. A cross-site request forgery vulnerability exists in the admin.jsp pag...

WordPress plugin Google Maps 'id' parameter cross-site scripting vulnerability

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin Google Maps 'id' parameter due to the...

WordPress Google Maps Plugin <= 2.3.9 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

Googlemaps Plugin Path Disclosure Vulnerability in Joomla!

Joomla! is a content management system. Joomla! Googlemaps plugin is a plugin for inserting google maps for Joomla! A path disclosure vulnerability exists in Joomla! Googlemaps Plugin that allows attackers to obtain sensitive information...

Security Bypass Vulnerability in Joomla! Googlemaps Plugin

Joomla! is a content management system. Joomla! Googlemaps plugin is a plugin for inserting google maps for Joomla! A security bypass vulnerability exists in Joomla! Googlemaps plugin, which can be exploited by attackers to bypass certain security restrictions...

CVE-2014-7182

Multiple cross-site scripting XSS vulnerabilities in the WP Google Maps plugin before 6.0.27 for WordPress allow remote attackers to inject arbitrary web script or HTML via the polyid parameter in an 1 editpoly, 2 editpolyline, or 3 editmarker action in the wp-google-maps-menu page to...

CVE-2014-7182

Multiple cross-site scripting XSS vulnerabilities in the WP Google Maps plugin before 6.0.27 for WordPress allow remote attackers to inject arbitrary web script or HTML via the polyid parameter in an 1 editpoly, 2 editpolyline, or 3 editmarker action in the wp-google-maps-menu page to...