CVE-2021-24383

MEDIUM

WP Google Maps < 8.1.12 - Authenticated Stored Cross-Site Scripting (XSS)

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2021-24383 has a selected CVSS score of 5.4 (medium); EIP currently links 1 catalogued exploit.

Description

The WP Google Maps WordPress plugin before 8.1.12 did not sanitise, validate of escape the Map Name when output in the Map List of the admin dashboard, leading to an authenticated Stored Cross-Site Scripting issue

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Affected products and versions

1
ProductSourceVersion range

WP Google Maps

Browse WP Google Maps / WP Google Maps
CVE List8.1.12 to < 8.1.12affected

Proofs of concept

1

Catalogued exploits

ExploitDBWordPress Plugin WP Google Maps 8.1.11 - Stored Cross-Site Scripting (XSS)ExploitDB exploitby Mohammed AdamNot analyzed1 file
ExploitDB
PoC details

References

3