Lucene search
Vinay Varma MudunuriWPEX-ID:2F9D3256-85C0-44FA-B0BE-FAA8989A1909HistoryJul 18, 2022 - 12:00 a.m.
Google Maps Anywhere <= 1.2.6.3 - Admin+ Stored Cross-Site Scripting
2022-07-1800:00:00
Vinay Varma Mudunuri
69
0.001 Low
EPSS
Percentile
25.0%
The plugin does not sanitise and escape any of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed (for example in multisite setup)
Put the following payload in any of the plugin settings: "><svg/onload=alert(/XSS/)>Related
prion
prion
Cross site scripting
2022-08-08 14:15:00
patchstack
patchstack
nvd
nvd
CVE-2022-2424
2022-08-08 14:15:10
wpvulndb
wpvulndb
Google Maps Anywhere <= 1.2.6.3 - Admin+ Stored Cross-Site Scripting
2022-07-18 00:00:00
cvelist
cvelist
cve
cve
CVE-2022-2424
2022-08-08 14:15:10