CVE-2025-2279
The Maps WordPress plugin through 1.0.6 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Vendor
Product
CWE
Yayın Tarihi
2025-04-04 06:15:40
Güncelleme
2025-04-29 19:42:04
Source Identifier
contact@wpscan.com
KEV Date Added
-