CVE-2021-24643: WP Map Block < 1.2.3 - Contributor+ Stored Cross-Site Scripting
Published Sep 27, 2021
·Updated
The WP Map Block WordPress plugin before 1.2.3 does not escape some attributes of the WP Map Block, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks
Affected Software
1 affected component
Wp Map Block Project Wp Map Block Wordpress<1.2.3
Event History
Sep 27, 2021
CVE Published
via MITRE·03:25 PM
Data Sourced
via MITRE·03:25 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-24643?
The severity of CVE-2021-24643 is considered to be medium due to the potential for Stored Cross-Site Scripting attacks.
2
How do I fix CVE-2021-24643?
To fix CVE-2021-24643, update the WP Map Block plugin to version 1.2.3 or higher.
3
Who is affected by CVE-2021-24643?
Users with roles as low as contributor can be affected by CVE-2021-24643 in the WP Map Block WordPress plugin.
4
What is the exploitation impact of CVE-2021-24643?
Exploiting CVE-2021-24643 can allow attackers to execute malicious scripts in the context of another user.
5
Is user input validation implemented in CVE-2021-24643?
CVE-2021-24643 lacks adequate user input validation for certain attributes, leading to security vulnerabilities.