CVE-2025-2279 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

The Maps WordPress plugin through 1.0.6 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shor…
Medium CVSS: 5.9

CVE-2025-2279

The Maps WordPress plugin through 1.0.6 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Vendor
Robosoft
Product
Maps
CWE
CWE-79
Yayın Tarihi
2025-04-04 06:15:40
Güncelleme
2025-04-29 19:42:04
Source Identifier
contact@wpscan.com
KEV Date Added
-

Kategoriler

Referanslar