CBX Map for Google Map & OpenStreetMap < 1.1.12 - Contributor+ Stored XSS

2024-01-2400:00:00

wpscan.com

plugin vulnerability input sanitization contributor-level access

5.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.2%

JSON

Description The plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

CPENameOperatorVersion
eq1.1.12

CPE	Name	Operator	Version
		eq	1.1.12

References

patchstack.com/database/vulnerability/cbxgooglemap/wordpress-cbx-map-for-google-map-openstreetmap-plugin-1-1-11-cross-site-scripting-xss-vulnerability-2