Store Locator Security Vulnerabilities and Issues — Store Locator CVE List

Lucene search

AgilelogixStore Locator

4 matches found

CVE•added 2023/09/04 12:15 p.m.•105 views

CVE-2023-4151

The Store Locator WordPress plugin before 1.4.13 does not sanitise and escape an invalid nonce before outputting it back in an AJAX response, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

6.1CVSS6AI score0.11517EPSS

CVE•added 2022/11/18 11:15 p.m.•44 views

CVE-2022-41615

Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability in Store Locator plugin

6.1CVSS6.3AI score0.0009EPSS

CVE•added 2023/01/23 3:15 p.m.•38 views

CVE-2022-4832

The Store Locator WordPress plugin before 1.4.9 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege ...

5.4CVSS5.3AI score0.00103EPSS

CVE•added 2023/06/22 9:15 a.m.•29 views

CVE-2023-27618

Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in AGILELOGIX Store Locator WordPress plugin

5.9CVSS4.9AI score0.00058EPSS