CVE-2021-36871: WordPress WP Google Maps Pro premium plugin <= 8.1.11 - Multiple Authenticated Persistent XSS vulnerabilities
Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities in WordPress WP Google Maps Pro premium plugin (versions <= 8.1.11). Vulnerable parameters: &wpgmapsmarkercategoryname, Value > &attributes[], Name > &attributes[], &icons[], &names[], &description, &link, &title.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2021-36871?
CVE-2021-36871 refers to multiple authenticated persistent cross-site scripting (XSS) vulnerabilities in the WordPress WP Google Maps Pro premium plugin (versions <= 8.1.11).
What is the severity of CVE-2021-36871?
CVE-2021-36871 has a severity level of medium with a CVSS score of 5.4.
Which software versions are affected by CVE-2021-36871?
Versions of WP Google Maps Pro plugin up to and including 8.1.11 are affected by CVE-2021-36871.
How can I fix the CVE-2021-36871 vulnerability?
To fix the CVE-2021-36871 vulnerability, you should update the WP Google Maps Pro plugin to a version higher than 8.1.11.
What is the Common Weakness Enumeration (CWE) for CVE-2021-36871?
The Common Weakness Enumeration (CWE) for CVE-2021-36871 is CWE-79, which refers to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').