Lucene search

Interactive Geo Maps < 1.5.9 - Contributor+ Stored XSS

🗓️ 30 Jan 2023 00:00:00Reported by wpvulndbType

Interactive Geo Maps < 1.5.9 - Contributor+ Stored XSS. Plugin lacks validation & escape of shortcode attributes, enabling Contributor+ role to execute Stored XSS attack

Reporter	Title	Published	Views	Family All 6
Vulnrichment	CVE-2023-23866 WordPress Interactive Geo Maps Plugin <= 1.5.8 is vulnerable to Cross Site Scripting (XSS)	25 Apr 202319:30	–	vulnrichment
Patchstack	WordPress Interactive Geo Maps Plugin <= 1.5.8 is vulnerable to Cross Site Scripting (XSS)	15 Feb 202300:00	–	patchstack
Cvelist	CVE-2023-23866 WordPress Interactive Geo Maps Plugin <= 1.5.8 is vulnerable to Cross Site Scripting (XSS)	25 Apr 202319:30	–	cvelist
Prion	Cross site scripting	25 Apr 202320:15	–	prion
NVD	CVE-2023-23866	25 Apr 202320:15	–	nvd
CVE	CVE-2023-23866	25 Apr 202320:15	–	cve

Vulners

Node

interactive_geo_maps_project interactive_geo_mapsRange<1.5.9wordpress

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

30 Jan 2023 00:00Current

5.1Medium risk

Vulners AI Score5.1

EPSS0.0004