Lucene search

K
wpvulndbWpvulndbWPVDB-ID:D5C13184-5A2C-4F04-ADDB-DAD55484AA01
HistorySep 20, 2023 - 12:00 a.m.

intergeo-maps <= 2.3.2 - Contributor+ Stored XSS

2023-09-2000:00:00
wpscan.com
7
plugin
xss
stored cross-site scripting

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

21.7%

Description The plugin does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin.

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

21.7%

Related for WPVDB-ID:D5C13184-5A2C-4F04-ADDB-DAD55484AA01