Lucene search
WpvulndbWPVDB-ID:5891190B-CC98-492B-B190-4EED546A4E86HistoryJan 23, 2023 - 12:00 a.m.
Oi Yandex.Maps <= 3.2.7 - Contributor+ Stored XSS
2023-01-2300:00:00
wpscan.com
2
yandex.maps
version 3.2.7
contributor+
stored xss
cross-site scripting
security issue
shortcode attributes
validation
escaping
0.001 Low
EPSS
Percentile
21.0%
The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
Related
cve
cve
CVE-2023-22721
2023-01-23 18:15:10
cvelist
cvelist
nvd
nvd
CVE-2023-22721
2023-01-23 18:15:10
prion
prion
Cross site scripting
2023-01-23 18:15:00