CVE-2023-1913 Maps Widget for Google Maps <= 4.24 - Authenticated (Administrator+) Stored Cross-Site Scripting

The Maps Widget for Google Maps for WordPress is vulnerable to Stored Cross-Site Scripting via widget settings in versions up to, and including, 4.24 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permission...

CVE-2023-1913

CVE-2023-1913 affects the WordPress plugin Maps Widget for Google Maps, vulnerable in all versions up to and including 4.24. The issue is a stored XSS via widget settings caused by insufficient input sanitization and output escaping, exploitable by authenticated attackers with administrator-level...

CVE-2023-1913 Maps Widget for Google Maps <= 4.24 - Authenticated (Administrator+) Stored Cross-Site Scripting

The Maps Widget for Google Maps for WordPress is vulnerable to Stored Cross-Site Scripting via widget settings in versions up to, and including, 4.24 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permission...

WordPress plugin Maps Widget for Google Maps 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

Maps Widget for Google Maps < 4.25 - Admin+ Stored XSS

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

PT-2023-17335 · WordPress · Maps Widget For Google Maps

Name of the Vulnerable Software and Affected Versions: The Maps Widget for Google Maps for WordPress versions up to, and including, 4.24 Description: The issue is related to Stored Cross-Site Scripting via widget settings due to insufficient input sanitization and output escaping. This allows...

CVE-2023-23878

Auth. editor+ Stored Cross-Site Scripting XSS vulnerability in flippercode WordPress Plugin for Google Maps – WP MAPS plugin = 4.3.9 versions...

CVE-2023-23878

Auth. editor+ Stored Cross-Site Scripting XSS vulnerability in flippercode WordPress Plugin for Google Maps – WP MAPS plugin = 4.3.9 versions...

Cross site scripting

Auth. editor+ Stored Cross-Site Scripting XSS vulnerability in flippercode WordPress Plugin for Google Maps – WP MAPS plugin = 4.3.9 versions...

CVE-2023-23878

CVE-2023-23878 is a stored XSS vulnerability in the flippercode WordPress plugin for Google Maps (WP MAPS) versions

PT-2023-19276 · Flippercode · Wp Maps Plugin

Name of the Vulnerable Software and Affected Versions: flippercode WordPress Plugin for Google Maps – WP MAPS plugin versions = 4.3.9 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability affects users with editor or higher permissions. There is ...

WordPress plugin Google Maps – WP MAPS 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress Maps Widget for Google Maps Plugin <= 4.23 is vulnerable to Cross Site Request Forgery (CSRF)

Software Maps Widget for Google Maps Type Plugin Vulnerable versions = 4.23 Fixed in 4.24 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE N/A Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID ac17c6ebd1c3 Credits Unknown Required...

CVE-2023-23864

Auth. contributor+ Cross-Site Scripting XSS vulnerability in Michael Aronoff Very Simple Google Maps plugin = 2.8.4 versions...

CVE-2023-23864

Auth. contributor+ Cross-Site Scripting XSS vulnerability in Michael Aronoff Very Simple Google Maps plugin = 2.8.4 versions...

Cross site scripting

Auth. contributor+ Cross-Site Scripting XSS vulnerability in Michael Aronoff Very Simple Google Maps plugin = 2.8.4 versions...

CVE-2023-23864

CVE-2023-23864 affects the WordPress plugin Very Simple Google Maps (Michael Aronoff) and is due to an XSS flaw in the plugin’s handling of shortcode attributes. Concretely, versions up to and including 2.8.4 are vulnerable; exploitation requires authenticated access from contributors or higher. ...

CVE-2023-23864 WordPress Very Simple Google Maps Plugin <= 2.8.4 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Cross-Site Scripting XSS vulnerability in Michael Aronoff Very Simple Google Maps plugin = 2.8.4 versions...

maps.cga.harvard.edu IFRAME Injection vulnerability OBB-3230353

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Plugin Very Simple Google Maps 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...