Lucene search
+L

816 matches found

Patchstack
Patchstack
added 2023/10/29 12:0 a.m.18 views

WordPress Google Maps made Simple Plugin <= 0.6 is vulnerable to SQL Injection

Software Google Maps made Simple Type Plugin Vulnerable versions = 0.6 Fixed in N/A OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-5315 Patch priority High CVSS severity High 8.5 Developer Claim ownership PSID 9139046f56f6 Credits István Márton Required privilege Subscriber...

8.8CVSS6.8AI score0.00565EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2023/10/26 12:0 a.m.21 views

WordPress Very Simple Google Maps Plugin <= 2.9 is vulnerable to Cross Site Scripting (XSS)

Software Very Simple Google Maps Type Plugin Vulnerable versions = 2.9 Fixed in 2.9.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5744 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 645d33a00b1e Credits Lana Codes Require...

6.4CVSS5.7AI score0.00603EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2023/10/25 6:17 p.m.5 views

CVE-2023-46190

Cross-Site Request Forgery CSRF vulnerability in Novo-media Novo-Map : your WP posts on custom google maps plugin = 1.1.2 versions...

8.8CVSS7.3AI score0.00271EPSS
SaveExploits0References1
NVD
NVD
added 2023/10/25 6:17 p.m.20 views

CVE-2023-46190

Cross-Site Request Forgery CSRF vulnerability in Novo-media Novo-Map : your WP posts on custom google maps plugin = 1.1.2 versions...

8.8CVSS5.8AI score0.00271EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/25 6:17 p.m.21 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Novo-media Novo-Map : your WP posts on custom google maps plugin = 1.1.2 versions...

6.8CVSS8.8AI score0.00271EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/10/25 12:0 a.m.5 views

WordPress Plugin Novo-Map : your WP posts on custom google maps Cross-site request forgery vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Novo-Map : your WP posts o...

8.8CVSS6.6AI score0.00271EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/10/25 12:0 a.m.6 views

WordPress Plugin Very Simple Google Maps Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

6.4CVSS5.9AI score0.00603EPSS
SaveExploits1References4
CVE
CVE
added 2023/10/24 1:53 p.m.77 views

CVE-2023-5744

CVE-2023-5744 affects the WordPress plugin Very Simple Google Maps . It is a Stored Cross-Site Scripting (XSS) vulnerability in the plugin’s vsgmap shortcode, present in all versions up to 2.9. An attacker with contributor-level or higher permissions can inject malicious scripts that run when use...

6.4CVSS5.2AI score0.00603EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2023/10/24 12:0 a.m.5 views

PT-2023-29891 · Novo Media · Novo-Map

Name of the Vulnerable Software and Affected Versions: Novo-media Novo-Map : your WP posts on custom google maps plugin versions 1.1.2 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user in...

8.8CVSS8.8AI score0.00271EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/10/24 12:0 a.m.9 views

PT-2023-32298 · WordPress · The Very Simple Google Maps

Name of the Vulnerable Software and Affected Versions: The Very Simple Google Maps plugin for WordPress versions up to, and including, 2.9 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'vsgmap' shortcode due to insufficient input sanitization and output escapin...

6.4CVSS5.5AI score0.00603EPSS
SaveExploits1References7
Patchstack
Patchstack
added 2023/10/23 12:0 a.m.17 views

WordPress TCD Google Maps Plugin <= 1.8 is vulnerable to Cross Site Scripting (XSS)

Software TCD Google Maps Type Plugin Vulnerable versions = 1.8 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5128 Patch priority Low CVSS severity Low 6.4 Developer Claim ownership PSID 4bab05c071b1 Credits István Márton Required...

6.4CVSS5.7AI score0.00545EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2023/10/06 12:0 a.m.12 views

WordPress 10Web Map Builder for Google Maps Plugin <= 1.0.73 is vulnerable to Broken Access Control

Software 10Web Map Builder for Google Maps Type Plugin Vulnerable versions = 1.0.73 Fixed in 1.0.74 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-45272 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 599bb14612c3 Credits Abdi...

6.7AI score0.0029EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2023/09/12 2:15 a.m.23 views

CVE-2023-4887

The Google Maps Plugin by Intergeo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'intergeo' shortcode in versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS5.7AI score0.00345EPSS
SaveExploits0References2
OSV
OSV
added 2023/09/12 2:15 a.m.4 views

CVE-2023-4887

The Google Maps Plugin by Intergeo for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'intergeo' shortcode in versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

5.4CVSS7AI score0.00345EPSS
SaveExploits0References2
Prion
Prion
added 2023/09/12 2:15 a.m.22 views

Cross site scripting

The Google Maps Plugin by Intergeo for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'intergeo' shortcode in versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

4.9CVSS5.2AI score0.00345EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/12 1:52 a.m.10 views

CVE-2023-4887 Google Maps Plugin by Intergeo <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Google Maps Plugin by Intergeo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'intergeo' shortcode in versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS6.8AI score0.00345EPSS
SaveExploits0References2
CVE
CVE
added 2023/09/12 1:52 a.m.40 views

CVE-2023-4887

CVE-2023-4887 affects the WordPress plugin “Google Maps Plugin by Intergeo” (Intergeo Maps). Vulnerable as of versions

6.4CVSS6.8AI score0.00345EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/09/12 1:52 a.m.28 views

CVE-2023-4887 Google Maps Plugin by Intergeo <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Google Maps Plugin by Intergeo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'intergeo' shortcode in versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS5.8AI score0.00345EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/09/12 12:0 a.m.6 views

WordPress plugin Google Maps Plugin by Intergeo Cross-site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. uninstall is one of the plugins used to completely uninstall WordPress. WordPress...

6.4CVSS6AI score0.00345EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2023/09/11 12:0 a.m.13 views

WordPress Google Maps Plugin by Intergeo Plugin <= 2.3.2 is vulnerable to Cross Site Scripting (XSS)

Software Google Maps Plugin by Intergeo Type Plugin Vulnerable versions = 2.3.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4887 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID a4236d4e874a Credits Lana Codes...

6.4CVSS6AI score0.00345EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder