Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Product

Products as named in CPE, with their records.

Published
1 selected

1 record

Vendor: Openstreetmap Clear all filters
TI-2022-04274 CVE-2022-4676 · GHSA-f46p-wjpf-84r3

OSM – OpenStreetMap <= 6.01 - Contributor+ Stored XSS via Shortcode

Priority MEDIUM 58

The OSM WordPress plugin through 6.01 does not validate and escape some of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00444 Published 2023-05-30 No fix listed