{"id":"CVE-2021-24383","state":"PUBLISHED","title":"WP Google Maps < 8.1.12 - Authenticated Stored Cross-Site Scripting (XSS)","description":"The WP Google Maps WordPress plugin before 8.1.12 did not sanitise, validate of escape the Map Name when output in the Map List of the admin dashboard, leading to an authenticated Stored Cross-Site Scripting issue","publishedAt":"2021-06-21T19:18:26.000Z","updatedAt":"2024-08-03T19:28:23.794Z","severity":null,"assigner":"WPScan","products":["WP Google Maps WP Google Maps"],"affected":[{"vendor":"WP Google Maps","product":"WP Google Maps","versions":[{"version":"8.1.12","status":"affected","lessThan":"8.1.12","versionType":"custom"}]}],"references":["https://wpscan.com/vulnerability/1270588c-53fe-447e-b83c-1b877dc7a954","http://packetstormsecurity.com/files/163261/WordPress-WP-Google-Maps-8.1.11-Cross-Site-Scripting.html"],"weaknesses":["CWE-79"],"ingestedAt":"2026-10-29T19:48:07.505Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2021/24xxx/CVE-2021-24383.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2021-24383","state":"PUBLISHED","datePublished":"2021-06-21T19:18:26.000Z","dateUpdated":"2024-08-03T19:28:23.794Z","assignerShortName":"WPScan","assignerOrgId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81","dateReserved":"2021-01-14T00:00:00.000Z"},"containers":{"cna":{"title":"WP Google Maps < 8.1.12 - Authenticated Stored Cross-Site Scripting (XSS)","descriptions":[{"lang":"en","value":"The WP Google Maps WordPress plugin before 8.1.12 did not sanitise, validate of escape the Map Name when output in the Map List of the admin dashboard, leading to an authenticated Stored Cross-Site Scripting issue"}],"affected":[{"vendor":"WP Google Maps","product":"WP Google Maps","versions":[{"version":"8.1.12","status":"affected","lessThan":"8.1.12","versionType":"custom"}]}],"references":[{"url":"https://wpscan.com/vulnerability/1270588c-53fe-447e-b83c-1b877dc7a954","tags":["x_refsource_CONFIRM"]},{"url":"http://packetstormsecurity.com/files/163261/WordPress-WP-Google-Maps-8.1.11-Cross-Site-Scripting.html","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-79","description":"CWE-79 Cross-site Scripting (XSS)","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"WPScan","dateUpdated":"2021-06-23T17:06:13.000Z","orgId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81"},"credits":[{"lang":"en","value":"Mohammed Adam"}],"source":{"discovery":"UNKNOWN"},"x_generator":"WPScan CVE Generator","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"contact@wpscan.com","ID":"CVE-2021-24383","STATE":"PUBLIC","TITLE":"WP Google Maps < 8.1.12 - Authenticated Stored Cross-Site Scripting (XSS)"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"WP Google Maps","version":{"version_data":[{"version_affected":"<","version_name":"8.1.12","version_value":"8.1.12"}]}}]},"vendor_name":"WP Google Maps"}]}},"credit":[{"lang":"eng","value":"Mohammed Adam"}],"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The WP Google Maps WordPress plugin before 8.1.12 did not sanitise, validate of escape the Map Name when output in the Map List of the admin dashboard, leading to an authenticated Stored Cross-Site Scripting issue"}]},"generator":"WPScan CVE Generator","problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-79 Cross-site Scripting (XSS)"}]}]},"references":{"reference_data":[{"name":"https://wpscan.com/vulnerability/1270588c-53fe-447e-b83c-1b877dc7a954","refsource":"CONFIRM","url":"https://wpscan.com/vulnerability/1270588c-53fe-447e-b83c-1b877dc7a954"},{"name":"http://packetstormsecurity.com/files/163261/WordPress-WP-Google-Maps-8.1.11-Cross-Site-Scripting.html","refsource":"MISC","url":"http://packetstormsecurity.com/files/163261/WordPress-WP-Google-Maps-8.1.11-Cross-Site-Scripting.html"}]},"source":{"discovery":"UNKNOWN"}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://wpscan.com/vulnerability/1270588c-53fe-447e-b83c-1b877dc7a954","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://packetstormsecurity.com/files/163261/WordPress-WP-Google-Maps-8.1.11-Cross-Site-Scripting.html","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T19:28:23.794Z"}}]}}}