51 matches found
Design/Logic Flaw
The wp-google-maps plugin before 7.10.43 for WordPress has XSS via the wp-admin/admin.php PATHINFO...
CVE-2019-9912
The wp-google-maps plugin before 7.10.43 for WordPress has XSS via the wp-admin/admin.php PATHINFO...
CVE-2019-9912
The wp-google-maps plugin before 7.10.43 for WordPress has XSS via the wp-admin/admin.php PATHINFO...
CVE-2019-9912
CVE-2019-9912 affects the WordPress WP Go Maps plugin prior to version 7.10.43. The vulnerability is a Cross-Site Scripting (XSS) via the wp-admin/admin.php PATH_INFO, allowing an attacker to execute arbitrary script in the admin context. Impact can include potential session hijacking or privileg...
WP Google Maps <= 6.3.14 - Authenticated Stored Cross-Site Scripting (XSS) via CSRF
The WP Google Maps WordPress plugin was affected by an Authenticated Stored Cross-Site Scripting XSS via CSRF security vulnerability...
CVE-2014-7182
Multiple cross-site scripting XSS vulnerabilities in the WP Google Maps plugin before 6.0.27 for WordPress allow remote attackers to inject arbitrary web script or HTML via the polyid parameter in an 1 editpoly, 2 editpolyline, or 3 editmarker action in the wp-google-maps-menu page to...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the WP Google Maps plugin before 6.0.27 for WordPress allow remote attackers to inject arbitrary web script or HTML via the polyid parameter in an 1 editpoly, 2 editpolyline, or 3 editmarker action in the wp-google-maps-menu page to...
CVE-2014-7182
The CVE-2014-7182 entry affects the WP Google Maps WordPress plugin, with XSS vulnerabilities in versions prior to 6.0.27. The underlying issue is unsanitized input via the poly_id parameter used by actions edit_poly, edit_polyline, and edit_marker on the wp-google-maps-menu page routed to wp-adm...
CVE-2014-7182
Multiple cross-site scripting XSS vulnerabilities in the WP Google Maps plugin before 6.0.27 for WordPress allow remote attackers to inject arbitrary web script or HTML via the polyid parameter in an 1 editpoly, 2 editpolyline, or 3 editmarker action in the wp-google-maps-menu page to...
Multiple Cross-Site Scripting (XSS) in WP Google Maps WordPress Plugin
Advisory ID: HTB23236 Product: WP Google Maps WordPress plugin Vendor: WP Google Maps Vulnerable Versions: 6.0.26 and probably prior Tested Version: 6.0.26 Advisory Publication: September 24, 2014 without technical details Vendor Notification: September 24, 2014 Vendor Patch: September 29, 2014...
Multiple Cross-Site Scripting (XSS) in WP Google Maps WordPress Plugin
High-Tech Bridge Security Research Lab discovered three XSS vulnerabilities in WP Google Maps WordPress plugin, which can be exploited to perform Cross-Site Scripting XSS attacks against administrators of vulnerable WP website. 1 Multiple XSS in WP Google Maps WordPress plugin: CVE-2014-7182 1.1...