CVE-2021-24383: WP Google Maps < 8.1.12 - Authenticated Stored Cross-Site Scripting (XSS)
Published Jun 21, 2021
·Updated
The WP Google Maps WordPress plugin before 8.1.12 did not sanitise, validate of escape the Map Name when output in the Map List of the admin dashboard, leading to an authenticated Stored Cross-Site Scripting issue
Affected Software
1 affected component
Codecabin Wp Go Maps Wordpress<8.1.12
Event History
Jun 21, 2021
CVE Published
via MITRE·07:18 PM
Data Sourced
via MITRE·07:18 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-24383?
CVE-2021-24383 has a medium severity rating due to the risk of authenticated stored cross-site scripting.
2
How do I fix CVE-2021-24383?
To fix CVE-2021-24383, update the WP Google Maps plugin to version 8.1.12 or later.
3
Who is affected by CVE-2021-24383?
CVE-2021-24383 affects users of the WP Google Maps WordPress plugin versions prior to 8.1.12.
4
What type of vulnerability is CVE-2021-24383?
CVE-2021-24383 is an authenticated stored cross-site scripting vulnerability.
5
What are the consequences of exploiting CVE-2021-24383?
Exploiting CVE-2021-24383 could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser.