CVE-2021-24383
MEDIUMWP Google Maps < 8.1.12 - Authenticated Stored Cross-Site Scripting in Map List
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2021-24383. PoCs published by Mohammed Adam.
AI-analyzed exploit summary This exploit demonstrates a stored XSS vulnerability in WordPress Plugin WP Google Maps 8.1.11. The attacker can inject malicious JavaScript code into the Map Name field, which executes when viewing the Map List.
Description
The WP Google Maps WordPress plugin before 8.1.12 did not sanitise, validate of escape the Map Name when output in the Map List of the admin dashboard, leading to an authenticated Stored Cross-Site Scripting issue
Exploits (1)
This exploit demonstrates a stored XSS vulnerability in WordPress Plugin WP Google Maps 8.1.11. The attacker can inject malicious JavaScript code into the Map Name field, which executes when viewing the Map List.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N