TI-2017-12989 CVE-2017-17744 · GHSA-2xpc-22fc-92xfA cross-site scripting (XSS) vulnerability in the custom-map plugin through 1.1 for…Priority LOW 29A cross-site scripting (XSS) vulnerability in the custom-map plugin through 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the map_id parameter to view/advancedsettings.php.CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00938 · Published 2017-12-19 · No fix listed CWE-79