Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbChloe ChamberlandWPVDB-ID:DC368484-F2FE-4C76-BA3D-E00E7F633719
HistoryApr 26, 2021 - 12:00 a.m.

Store Locator Plus <= 5.5.15 - Unauthenticated Stored Cross-Site Scripting (XSS)

2021-04-2600:00:00
Chloe Chamberland
wpscan.com
9
store locator plus
xss
unauthenticated
javascript
poc
security

EPSS

0.001

Percentile

30.8%

JSON

There are several endpoints in the plugin that could allow unauthenticated attackers the ability to inject malicious JavaScript into pages.

PoC

The PoC will be displayed once the issue has been remediated

Related

nvd 1
cvelist 1
prion 1
cve 1
wpexploit 1
nvd
nvd
CVE-2021-24290
2021-05-17 17:15:08
cvelist
cvelist
CVE-2021-24290 Store Locator Plus <= 5.5.15 - Unauthenticated Stored Cross-Site Scripting (XSS)
2021-05-17 16:48:53
prion
prion
Code injection
2021-05-17 17:15:00
cve
cve
CVE-2021-24290
2021-05-17 17:15:08
wpexploit
wpexploit
Store Locator Plus <= 5.5.15 - Unauthenticated Stored Cross-Site Scripting (XSS)
2021-04-26 00:00:00

EPSS

0.001

Percentile

30.8%

JSON
Related for WPVDB-ID:DC368484-F2FE-4C76-BA3D-E00E7F633719
nvd1cvelist1prion1cve1wpexploit1