PT-2017-7254

Name of the Vulnerable Software and Affected Versions Easy2Map plugin versions prior to 1.3.0 Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the map id parameter in the includes/MapPinImageSave.ph...

CVE-2015-7668: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in includes/MapPinImageSave.php in the Easy2Map plugin before 1.3.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the mapid parameter...

PT-2015-6642

Name of the Vulnerable Software and Affected Versions Easy2Map plugin versions prior to 1.2.5 Description The issue allows remote attackers to create arbitrary files via a .. dot dot in the map id parameter in the includes/MapPinImageSave.php file. Recommendations For versions prior to 1.2.5,...

CVE-2015-4616: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in includes/MapPinImageSave.php in the Easy2Map plugin before 1.2.5 for WordPress allows remote attackers to create arbitrary files via a .. dot dot in the mapid parameter...