76 matches found
CVE-2021-36871
Multiple Authenticated Persistent Cross-Site Scripting XSS vulnerabilities in WordPress WP Google Maps Pro premium plugin versions &attributes, Name &attributes, &icons, &names, &description, &link, &title...
CVE-2021-36871 WordPress WP Google Maps Pro premium plugin <= 8.1.11 - Multiple Authenticated Persistent XSS vulnerabilities
Multiple Authenticated Persistent Cross-Site Scripting XSS vulnerabilities in WordPress WP Google Maps Pro premium plugin versions &attributes, Name &attributes, &icons, &names, &description, &link, &title...
CVE-2021-36871
CVE-2021-36871 corresponds to multiple authenticated persistent cross-site scripting (XSS) vulnerabilities in the WordPress WP Google Maps Pro premium plugin (versions ≤ 8.1.11). The issues arise from unsanitized inputs in several vulnerable parameters (e.g., wpgmaps_marker_category_name, &attrib...
CVE-2021-36871: Improper Neutralization of Input During Web Page Generation
Multiple Authenticated Persistent Cross-Site Scripting XSS vulnerabilities in WordPress WP Google Maps Pro premium plugin versions &attributes, Name &attributes, &icons, &names, &description, &link, &title...
PT-2021-21384 · WordPress · Wp Google Maps Pro
Name of the Vulnerable Software and Affected Versions: WordPress WP Google Maps Pro premium plugin versions = 8.1.11 Description: The issue concerns multiple authenticated persistent Cross-Site Scripting XSS vulnerabilities. Vulnerable parameters include &wpgmaps marker category name, &attributes...
WordPress 插件 跨站脚本漏洞
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists i...
MapPress Maps Pro < 2.53.9 - Remote Code Execution (RCE) due to Incorrect Access Control in AJAX Actions
The pro version of this plugin registers several AJAX actions that call functions which lack capability checks and nonce checks, specifically the ‘ajaxget’, ‘ajaxsave’, and ‘ajaxdelete’ functions in mappresstemplate.php. As such, it is possible for a logged-in attacker with minimal permissions,...
Wordpress hero-maps-pro plugin cross-site scripting vulnerability
WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the Wordpress hero-maps-pro plugin version 2.1.0. An attacker...
CVE-2016-1000137
Reflected XSS in wordpress plugin hero-maps-pro v2.1.0...
Cross site scripting
Reflected XSS in wordpress plugin hero-maps-pro v2.1.0...
CVE-2016-1000137
WordPress Hero Maps Pro plugin version 2.1.0 is affected by a reflected cross-site scripting (XSS) vulnerability. The Nuclei template documents a reflected XSS in Hero Maps Pro 2.1.0, allowing an attacker to execute arbitrary JavaScript in the victim’s browser in the context of the affected site....
CVE-2016-1000137
Reflected XSS in wordpress plugin hero-maps-pro v2.1.0...
CVE-2016-1000137: Improper Neutralization of Input During Web Page Generation
Reflected XSS in wordpress plugin hero-maps-pro v2.1.0...
PT-2016-4529
Name of the Vulnerable Software and Affected Versions hero-maps-pro version 2.1.0 Description The issue is related to a Reflected XSS in the hero-maps-pro wordpress plugin. Recommendations For hero-maps-pro version 2.1.0, update to a newer version that contains a fix for this issue...
WordPress Hero Maps Pro plugin <= 2.1.0 - Cross Site-Scripting (XSS) vulnerability
Cross Site-Scripting XSS vulnerability discovered by Larry W. Cashdollar in WordPress Hero Maps Pro plugin versions = 2.1.0. Solution Plugin closed. Deactivate and delete...
Hero Maps Pro <= 2.1.0 - Unauthenticated Reflected Cross-Site Scripting (XSS)
The hero-maps-pro WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. http://www.example.com/wp-content/plugins/hero-maps-pro/views/dashboard/index.php?v="alert1;"...