CVE-2019-9912: XSS
Published Mar 21, 2019
·Updated
The wp-google-maps plugin before 7.10.43 for WordPress has XSS via the wp-admin/admin.php PATHINFO.
Affected Software
1 affected component
Codecabin Wp Go Maps Wordpress<7.10.43
Event History
Mar 21, 2019
CVE Published
via MITRE·11:01 PM
Data Sourced
via MITRE·11:01 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-9912?
CVE-2019-9912 is classified as a high-severity Cross-Site Scripting (XSS) vulnerability.
2
How do I fix CVE-2019-9912?
To fix CVE-2019-9912, update the WP Google Maps plugin to version 7.10.43 or later.
3
What software is affected by CVE-2019-9912?
CVE-2019-9912 affects WP Google Maps plugin versions prior to 7.10.43.
4
Can CVE-2019-9912 be exploited remotely?
Yes, CVE-2019-9912 can be exploited remotely by attackers to execute malicious scripts.
5
What is Cross-Site Scripting in the context of CVE-2019-9912?
In the context of CVE-2019-9912, Cross-Site Scripting allows attackers to inject malicious scripts into web pages viewed by users.