medium6.1
CVE-2021-24290
There are several endpoints in the Store Locator Plus for WordPress plugin through 5.5.15 that could allow unauthenticated attackers the ability to inject mali…
Impact
There are several endpoints in the Store Locator Plus for WordPress plugin through 5.5.15 that could allow unauthenticated attackers the ability to inject malicious JavaScript into pages.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| De-Baat | Store Locator Plus | through 5.5.15 |
Weakness classification
References
- NVD record
- CVE.org record
- https://wpscan.com/vulnerability/dc368484-f2fe-4c76-ba3d-e00e7f633719
- https://www.wordfence.com/blog/2021/04/severe-unpatched-vulnerabilities-leads-to-closure-of-store-locator-plus-plugin
- https://wpscan.com/vulnerability/dc368484-f2fe-4c76-ba3d-e00e7f633719
- https://www.wordfence.com/blog/2021/04/severe-unpatched-vulnerabilities-leads-to-closure-of-store-locator-plus-plugin