CVE-2014-7182 WP Google Maps <= 6.0.26 - Reflected Cross-Site Scripting
MediumCVSS 4.3
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in the WP Google Maps plugin before 6.0.27 for WordPress allow remote attackers to inject arbitrary web script or HTML via the poly_id parameter in an (1) edit_poly, (2) edit_polyline, or (3) edit_marker action in the wp-google-maps-menu page to wp-admin/admin.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wordpress wp-google-maps(WordPress) | < 6.0.27 | 6.0.27 |
| codecabin wp go maps | <= 6.0.26 | No fix listed |
References
- Wordfence Intelligence third-party-advisory
- www.cve.org
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20141015 Multiple Cross-Site Scripting (XSS) in WP Google Maps WordPress Plugin mailing-list third-party-advisory vdb-entry
- 70597 third-party-advisory vdb-entry
- wordpress.org product release-notes
- www.htbridge.com exploit