CVE-2014-7182: XSS
Multiple cross-site scripting (XSS) vulnerabilities in the WP Google Maps plugin before 6.0.27 for WordPress allow remote attackers to inject arbitrary web script or HTML via the polyid parameter in an (1) editpoly, (2) editpolyline, or (3) editmarker action in the wp-google-maps-menu page to wp-admin/admin.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-7182?
CVE-2014-7182 has been classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2014-7182?
To mitigate CVE-2014-7182, update the WP Google Maps plugin to version 6.0.27 or later.
What are the vulnerable versions of the WP Google Maps plugin for CVE-2014-7182?
The vulnerable versions of the WP Google Maps plugin are any versions prior to 6.0.27.
What types of attacks can result from CVE-2014-7182?
CVE-2014-7182 allows remote attackers to perform cross-site scripting attacks by injecting arbitrary web scripts into the application.
Which components are affected by CVE-2014-7182?
CVE-2014-7182 affects actions such as edit_poly, edit_polyline, and edit_marker in the wp-google-maps-menu page.