Description
There are several endpoints in the Store Locator Plus for WordPress plugin through 5.5.15 that could allow unauthenticated attackers the ability to inject malicious JavaScript into pages.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Store Locator Plus® | Store Locator Plus for WordPress | 5.5.15 – ≤ 5.5.15 | — |