Skip to content
OpenAdvisories
Unscored CVE-2021-46780 EUVD-2021-33436GHSA-hgh9-hxx2-hfxf

Easy Google Maps < 1.9.32 - Reflected Cross-Site Scripting

Published Apr 25, 2022 · Updated Aug 4, 2024 · Assigned by WPScan

Description

The Easy Google Maps WordPress plugin before 1.9.32 does not escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting

Affected products

VendorProductAffectedFixed
— Easy Google Maps 1.9.32 – < 1.9.32 1.9.32

References