7 matches found
EUVD-2023-57466
Malicious code in bioql PyPI...
CVE-2023-5128
The TCD Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'map' shortcode in versions up to, and including, 1.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...
CVE-2023-5128
CVE-2023-5128 affects the TCD Google Maps WordPress plugin (versions up to and including 1.8). It is a Stored XSS via the map shortcode caused by insufficient input sanitization and output escaping of user-supplied attributes, allowing authenticated attackers with contributor-level and above perm...
CVE-2023-5128 TCD Google Maps <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The TCD Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'map' shortcode in versions up to, and including, 1.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...
WordPress Plugin TCD Google Maps Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
PT-2023-31782 · WordPress · Tcd Google Maps Plugin
Name of the Vulnerable Software and Affected Versions: TCD Google Maps plugin for WordPress versions up to, and including, 1.8 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the 'map' shortcode, allowing authenticated attacker...
WordPress TCD Google Maps Plugin <= 1.8 is vulnerable to Cross Site Scripting (XSS)
Software TCD Google Maps Type Plugin Vulnerable versions = 1.8 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5128 Patch priority Low CVSS severity Low 6.4 Developer Claim ownership PSID 4bab05c071b1 Credits István Márton Required...