Aller au contenu
Se connecter
Non notée

CVE-2021-24468 The Leaflet Map WordPress plugin before 3.0.0 does not escape some shortcode attributes before they are used in…

Description

The Leaflet Map WordPress plugin before 3.0.0 does not escape some shortcode attributes before they are used in JavaScript code or HTML, which could allow users with a role as low as Contributors to exploit stored XSS issues

Produits et versions touchés

Produit Versions touchées Corrigé en
Leaflet Map 3.0 premières → < 3.0.0 3.0.0

Autres CVE de Leaflet Map

Les 2 CVE de Leaflet Map →
CVE-2021-24467 The Leaflet Map WordPress plugin before 3.0.0 does not verify the CSRF nonce when saving its settings, which allows… Non notée
Suivre cette CVE