Lucene search
+L

2646 matches found

OSV
OSV
added 2024/03/25 12:15 p.m.5 views

CVE-2023-25039

Missing Authorization vulnerability in CodePeople Google Maps CP.This issue affects Google Maps CP: from n/a through 1.0.43...

8.8CVSS7.3AI score0.00497EPSS
SaveExploits0References1
NVD
NVD
added 2024/03/25 12:15 p.m.27 views

CVE-2023-25039

Missing Authorization vulnerability in CodePeople Google Maps CP.This issue affects Google Maps CP: from n/a through 1.0.43...

8.8CVSS4.7AI score0.00497EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/25 11:46 a.m.14 views

CVE-2023-25039 WordPress Google Maps CP plugin <= 1.0.43 - Missing Authorization Leading To Feedback Submission Vulnerability

Missing Authorization vulnerability in CodePeople Google Maps CP.This issue affects Google Maps CP: from n/a through 1.0.43...

4.3CVSS8AI score0.00497EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/25 11:46 a.m.69 views

CVE-2023-25039

CVE-2023-25039 : WordPress Google Maps CP plugin (CodePeople Google Maps CP)

8.8CVSS8AI score0.00497EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/03/25 11:46 a.m.29 views

CVE-2023-25039 WordPress Google Maps CP plugin <= 1.0.43 - Missing Authorization Leading To Feedback Submission Vulnerability

Missing Authorization vulnerability in CodePeople Google Maps CP.This issue affects Google Maps CP: from n/a through 1.0.43...

4.3CVSS5AI score0.00497EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/03/25 12:0 a.m.14 views

WordPress WP Go Maps Plugin <= 9.0.29 is vulnerable to Cross Site Scripting (XSS)

Software WP Go Maps Type Plugin Vulnerable versions = 9.0.29 Fixed in 9.0.30 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29931 Patch priority Medium CVSS severity Medium 7.1 Developer WP Go Maps PSID ec3cfcab7699 Credits Rafie Muhammad Patchstack Required...

7.1CVSS6.5AI score0.00753EPSS
SaveExploits0References2Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2024/03/25 12:0 a.m.5 views

VulnCheck KEV: CVE-2024-29931

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPGMaps WP Go Maps wp-google-maps.This issue affects WP Go Maps: from n/a through = 9.0.29...

6.1CVSS7.3AI score0.00753EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/03/25 12:0 a.m.22 views

WordPress Plugin Google Maps CP 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

8.8CVSS8.1AI score0.00497EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/03/25 12:0 a.m.13 views

PT-2024-12043 · Codepeople · Codepeople Google Maps Cp

Name of the Vulnerable Software and Affected Versions: CodePeople Google Maps CP versions 1.0.43 and earlier Description: The issue is related to a Missing Authorization vulnerability in CodePeople Google Maps CP. This vulnerability affects the software by not properly checking authorization,...

4.3CVSS8.5AI score0.00497EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2024/03/18 9:47 a.m.8 views

xstream: Denial of Service by injecting recursive collections or maps based on element's hash values raising a stack overflow

A flaw was found in the xstream package. This flaw allows an attacker to cause a denial of service by injecting recursive collections or maps, raising a stack overflow...

8.2CVSS7.3AI score0.08689EPSS
SaveExploits1References5
OSV
OSV
added 2024/03/13 2:15 a.m.9 views

CVE-2024-1582

The WP Go Maps formerly WP Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpgmza' shortcode in all versions up to, and including, 9.0.32 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible...

5.4CVSS5.9AI score0.0032EPSS
SaveExploits0References2
NVD
NVD
added 2024/03/13 2:15 a.m.28 views

CVE-2023-4839

The WP Go Maps for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 9.0.32 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to...

4.8CVSS4.3AI score0.00342EPSS
SaveExploits0References2
Prion
Prion
added 2024/03/13 2:15 a.m.30 views

Cross site scripting

The WP Go Maps for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 9.0.32 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to...

3.2CVSS6.1AI score0.00342EPSS
SaveExploits0References2
CVE
CVE
added 2024/03/13 1:57 a.m.51 views

CVE-2023-4839

CVE-2023-4839 summary (WP Go Maps for WordPress) The WP Go Maps (WP Google Maps) plugin is affected by a Stored XSS in admin settings, present in versions up to and including 9.0.32. The vulnerability stems from insufficient input sanitization and output escaping, enabling an authenticated attack...

4.8CVSS5AI score0.00342EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2024/03/13 1:57 a.m.56 views

CVE-2024-1582

CVE-2024-1582 affects the WordPress plugin WP Go Maps (formerly WP Google Maps). It allows Stored XSS through the plugin’s wpgmza shortcode; exploited via user-supplied attributes due to insufficient input sanitization and output escaping. Affected versions: all prior to and including 9.0.32. Imp...

6.4CVSS6AI score0.0032EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/03/13 12:0 a.m.12 views

PT-2024-13609 · WordPress · Wp Go Maps

Name of the Vulnerable Software and Affected Versions: WP Go Maps for WordPress versions up to, and including, 9.0.32 Description: The issue is related to Stored Cross-Site Scripting via admin settings due to insufficient input sanitization and output escaping. This allows authenticated attackers...

4.8CVSS8AI score0.00342EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/03/13 12:0 a.m.8 views

WordPress Plugin WP Go Maps Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.8CVSS5.9AI score0.00342EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/03/13 12:0 a.m.19 views

PT-2024-18148 · WordPress · Wp Go Maps

Name of the Vulnerable Software and Affected Versions: WP Go Maps plugin for WordPress versions up to, and including, 9.0.32 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the plugin's 'wpgmza' shortcode, allowing authenticate...

6.4CVSS9.4AI score0.0032EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/03/13 12:0 a.m.7 views

WordPress Plugin WP Go Maps Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.4CVSS5.9AI score0.0032EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2024/03/12 12:0 a.m.13 views

WordPress WP Go Maps Plugin <= 9.0.32 is vulnerable to Cross Site Scripting (XSS)

Software WP Go Maps Type Plugin Vulnerable versions = 9.0.32 Fixed in 9.0.33 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1582 Patch priority Low CVSS severity Low 6.5 Developer WP Go Maps PSID 69b3a77b21e0 Credits Richard Telleng stueotue Require...

6.4CVSS5.7AI score0.0032EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder