Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: Supsystic Component: Easy Google Maps Clear all filters
TI-2024-04843 CVE-2024-5219 · GHSA-xj6v-rj9r-jrjq

Easy Google Maps <= 1.11.15 - Authenticated (Author+) Stored Cross-Site Scripting

Priority LOW 30

The Easy Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's file upload feature in all versions up to, and including, 1.11.15 due to insufficient input sanitization and output…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00341 Published 2024-07-02 No fix listed CWE-79
TI-2021-21493 CVE-2021-46780 · GHSA-hgh9-hxx2-hfxf

Easy Google Maps < 1.9.32 - Reflected Cross-Site Scripting

Priority LOW 29

The Easy Google Maps WordPress plugin before 1.9.32 does not escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2022-04-25 Fixed in 1.9.32 CWE-79
TI-2021-16713 CVE-2021-39346 · GHSA-44xv-8ff2-fg74

Google Maps Easy <= 1.9.33 Authenticated Stored Cross-Site Scripting

Priority LOW 24

The Google Maps Easy WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/modules/marker_groups/views/tpl/mgrEditMarker…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00975 Published 2021-11-01 No fix listed CWE-79