CVE-2021-24274

The CVE-2021-24274 entry refers to the WordPress plugin Ultimate Maps by Supsystic (versions before 1.2.5). The vulnerability is a reflected Cross-Site Scripting (XSS) due to improper sanitization of the tab parameter on the plugin’s options page before output in an attribute. Affected component:...

CVE-2023-6732

Affected software: WordPress plugin Ultimate Maps by Supsystic prior to version 1.2.16. Description across connected sources confirms an Admin+ Stored XSS vulnerability arising from inadequate sanitization/escaping of settings, enabling high-privilege users to perform cross-site scripting (e.g., ...