Unscored CVE-2015-7668 EUVD-2015-7571GHSA-2h76-9h3x-r854

Cross-site scripting (XSS) vulnerability in includes/MapPinImageSave.php in the Easy2Map plugin before 1.3.0 for WordPress allows remote at…

Published Dec 27, 2017 · Updated Aug 6, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in includes/MapPinImageSave.php in the Easy2Map plugin before 1.3.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the map_id parameter.

References

https://wpvulndb.com/vulnerabilities/8205
https://wordpress.org/plugins/easy2map/#developers
20151004 A Reflected XSS in Easy2Map version 1.2.9 WordPress plugin mailing-list