CVE-2019-14792: XSS
Published Aug 9, 2019
·Updated
The WP Google Maps plugin before 7.11.35 for WordPress allows XSS via the wp-admin/ rectanglename or rectangleopacity parameter.
Affected Software
1 affected component
Codecabin Wp Go Maps Wordpress<7.11.35
Event History
Aug 9, 2019
CVE Published
via MITRE·12:14 PM
Data Sourced
via MITRE·12:14 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-14792?
CVE-2019-14792 has a high severity rating due to the potential for Cross-Site Scripting (XSS) attacks.
2
How do I fix CVE-2019-14792?
To fix CVE-2019-14792, update the WP Google Maps plugin to version 7.11.35 or later.
3
What types of attacks can CVE-2019-14792 lead to?
CVE-2019-14792 can lead to XSS attacks, allowing attackers to inject malicious scripts into web pages.
4
Which versions of the WP Google Maps plugin are affected by CVE-2019-14792?
CVE-2019-14792 affects all versions of the WP Google Maps plugin before version 7.11.35.
5
Is authentication required to exploit CVE-2019-14792?
Yes, CVE-2019-14792 requires authentication to exploit the vulnerability.