The WP Mapa Politico Espana WordPress plugin before 3.7.0 does not sanitise or escape some of its settings before outputting them in attributes, allowing high privilege users to perform Cross-Site Scripting attacks even…
CVSS 3.1MEDIUM 4.8·Network·High privileges·User interaction·EPSS 0.00617·Published 2021-09-20·Fixed in 3.7.0CWE-79