Skip to content
Sign in
Not rated

CVE-2021-24468 The Leaflet Map WordPress plugin before 3.0.0 does not escape some shortcode attributes before they are used in…

Description

The Leaflet Map WordPress plugin before 3.0.0 does not escape some shortcode attributes before they are used in JavaScript code or HTML, which could allow users with a role as low as Contributors to exploit stored XSS issues

Affected products and versions

Product Affected versions Fixed in
Leaflet Map 3.0 earliest → < 3.0.0 3.0.0

Other CVEs of Leaflet Map

The 2 CVEs of Leaflet Map →
CVE-2021-24467 The Leaflet Map WordPress plugin before 3.0.0 does not verify the CSRF nonce when saving its settings, which allows… Not rated
Track this CVE