Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Product

Products as named in CPE, with their records.

Published
1 selected

1 record

Vendor: Yamaps Project Clear all filters
TI-2023-00255 CVE-2023-0270 · GHSA-pwr8-q856-h5x2

YaMaps for WordPress Plugin < 0.6.26 - Contributor+ Stored XSS

Priority MEDIUM 58

The YaMaps for WordPress Plugin WordPress plugin before 0.6.26 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow user…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00477 Published 2023-02-13 Fixed in 0.6.26