Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24643

WP Map Block < 1.2.3 - Contributor+ Stored Cross-Site Scripting

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The WP Map Block WordPress plugin before 1.2.3 does not escape some attributes of the WP Map Block, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown WP Map Block – Gutenberg Map Block for Google Map and OpenStreet Map

  • 1.2.3 to < 1.2.3affected

References