CVE-2021-36870: WordPress WP Google Maps plugin <= 8.1.12 - Multiple Authenticated Persistent XSS vulnerabilities
Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities in WordPress WP Google Maps plugin (versions <= 8.1.12). Vulnerable parameters: &datasetname, &wpgmzagdprretentionpurpose, &wpgmzagdprcompanyname, &name #2, &name, &polyname #2, &polyname, &address.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2021-36870?
CVE-2021-36870 is classified as a high severity vulnerability due to its potential for exploitation via persistent cross-site scripting.
How do I fix CVE-2021-36870?
To fix CVE-2021-36870, update the WordPress WP Google Maps plugin to version 8.1.13 or later.
What are the affected versions of the WP Google Maps plugin for CVE-2021-36870?
CVE-2021-36870 affects WP Google Maps plugin versions 8.1.12 and earlier.
What type of vulnerability is CVE-2021-36870?
CVE-2021-36870 is a multiple authenticated persistent cross-site scripting (XSS) vulnerability.
Can CVE-2021-36870 be exploited by unauthenticated users?
No, CVE-2021-36870 requires an authenticated user to exploit the persistent cross-site scripting vulnerability.