Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpexploitChloe ChamberlandWPEX-ID:DC368484-F2FE-4C76-BA3D-E00E7F633719
HistoryApr 26, 2021 - 12:00 a.m.

Store Locator Plus <= 5.5.15 - Unauthenticated Stored Cross-Site Scripting (XSS)

2021-04-2600:00:00
Chloe Chamberland
69
store locator
version 5.5.15
unauthenticated
stored
cross-site scripting
xss
exploit

EPSS

0.001

Percentile

30.8%

JSON

There are several endpoints in the plugin that could allow unauthenticated attackers the ability to inject malicious JavaScript into pages.

The PoC will be displayed once the issue has been remediated

Related

nvd 1
cve 1
cvelist 1
prion 1
wpvulndb 1
nvd
nvd
CVE-2021-24290
2021-05-17 17:15:08
cve
cve
CVE-2021-24290
2021-05-17 17:15:08
cvelist
cvelist
CVE-2021-24290 Store Locator Plus <= 5.5.15 - Unauthenticated Stored Cross-Site Scripting (XSS)
2021-05-17 16:48:53
prion
prion
Code injection
2021-05-17 17:15:00
wpvulndb
wpvulndb
Store Locator Plus <= 5.5.15 - Unauthenticated Stored Cross-Site Scripting (XSS)
2021-04-26 00:00:00

EPSS

0.001

Percentile

30.8%

JSON
Related for WPEX-ID:DC368484-F2FE-4C76-BA3D-E00E7F633719
nvd1cve1cvelist1prion1wpvulndb1