62 matches found
WordPress Leaflet Maps Marker Plugin 0.0.1 - "id" Parameter XSS
WordPress Leaflet Maps Marker plugin's "id" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can stea...
WordPress Plugin Leaflet Maps Marker 0.0.1 - leaflet_layer.php?id Cross-Site Scripting
WordPress Plugin Leaflet Maps Marker 0.0.1 - leafletlayer.php?id Cross-Site Scripting source: https://www.securityfocus.com/bid/53526/info The Leaflet plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may...