Unscored CVE-2015-4615 EUVD-2015-4635GHSA-755c-vwgj-9jvj

Vulnerability in Easy2map-photos WordPress Plugin v1.09 allows SQL Injection via unsanitized mapTemplateName, mapName, mapSettingsXML, pare…

Published Feb 15, 2019 · Updated Aug 6, 2024 · Assigned by larry_cashdollar

Vendor: Steven Ellis Product: Easy2map-photos WordPress Plugin Category: Web / CMS

Description

Vulnerability in Easy2map-photos WordPress Plugin v1.09 allows SQL Injection via unsanitized mapTemplateName, mapName, mapSettingsXML, parentCSSXML, photoCSSXML, mapCSSXML, mapHTML,mapID variables

Affected products

Vendor	Product	Affected	Fixed
Steven Ellis	Easy2map-photos WordPress Plugin	1.09	—

References

http://www.vapid.dhs.org/advisory.php?v=130
https://wordpress.org/plugins/easy2map-photos