medium5.4
CVE-2019-14792
The WP Google Maps plugin before 7.11.35 for WordPress allows XSS via the wp-admin/ rectangle_name or rectangle_opacity parameter.
Impact
The WP Google Maps plugin before 7.11.35 for WordPress allows XSS via the wp-admin/ rectangle_name or rectangle_opacity parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Codecabin | Wp Go Maps | before 7.11.35 |
Weakness classification
References
- NVD record
- CVE.org record
- https://wordpress.org/plugins/wp-google-maps/#developers
- https://wpvulndb.com/vulnerabilities/9442
- https://www.pluginvulnerabilities.com/2019/07/08/recently-closed-wordpress-plugin-with-400000-installs-contains-another-authenticated-persistent-xss-vulnerability/
- https://wordpress.org/plugins/wp-google-maps/#developers
- https://wpvulndb.com/vulnerabilities/9442
- https://www.pluginvulnerabilities.com/2019/07/08/recently-closed-wordpress-plugin-with-400000-installs-contains-another-authenticated-persistent-xss-vulnerability/