CVE-2021-24274: Ultimate Maps by Supsystic < 1.2.5 - Reflected Cross-Site scripting (XSS)
Published May 5, 2021
·Updated
The Ultimate Maps by Supsystic WordPress plugin before 1.2.5 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue
Affected Software
1 affected component
Supsystic Ultimate Maps Wordpress<1.2.5
Event History
May 5, 2021
CVE Published
via MITRE·06:28 PM
Data Sourced
via MITRE·06:28 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2021-24274.
2
What is the affected software?
The affected software is the Ultimate Maps by Supsystic WordPress plugin before version 1.2.5.
3
What is the severity of CVE-2021-24274?
The severity of CVE-2021-24274 is medium with a CVSS score of 6.1.
4
What is the CWE classification for this vulnerability?
The CWE classification for this vulnerability is CWE-79.
5
How can I fix the vulnerability?
To fix the vulnerability, update the Ultimate Maps by Supsystic WordPress plugin to version 1.2.5 or later.