Описание
The MapPress Maps for WordPress plugin before 2.94.9 does not sanitise and escape some parameters when outputing them in the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks.
Ссылки
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.94.9 (исключая)
cpe:2.3:a:mappresspro:mappress:*:*:*:*:free:wordpress:*:*
EPSS
Процентиль: 56%
0.00339
Низкий
6.8 Medium
CVSS3
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 6.8
github
10 месяцев назад
The MapPress Maps for WordPress plugin before 2.94.9 does not sanitise and escape some parameters when outputing them in the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks.
EPSS
Процентиль: 56%
0.00339
Низкий
6.8 Medium
CVSS3
Дефекты
CWE-79