10webMap Builder For Google Maps*
3 matches found
CVE-2023-0037
The 10Web Map Builder for Google Maps WordPress plugin, in versions prior to 1.0.73 , is vulnerable to SQL injection . The root cause is the failure to properly sanitise and escape certain parameters used in an SQL statement triggered by an AJAX action . Because this action is accessible to unaut...
9.8CVSS9.9AI score0.03911EPSS
SaveIn wild
CVE-2022-4758
CVE-2022-4758 affects the WordPress plugin 10WebMapBuilder (pre-1.0.72). The issue: the plugin does not validate/escape certain shortcode attributes before output, enabling Stored XSS from users with as low as a contributor to targets with admin privileges. Affected: 10WebMapBuilder WordPress plu...
5.4CVSS5.3AI score0.00471EPSS
Save