CVE-2021-24383
Title: Codecabin Wp Go Maps Cross-Site Scripting (XSS)
Cross-Site Scripting (XSS)
Proof Of Concept
PoC Available for CVE-2021-24383
CWE Category
CWE-79
Published Date
Jun 21, 2021
Modified Date
Nov 21, 2024
Exploit Status
Available
Score
5.4
CVSS v3.1
Exploit Probability (EPSS)
2.34%
Vulnerability Summary
CVE-2021-24383: The WP Google Maps WordPress plugin before 8.1.12 did not sanitise, validate of escape the Map Name when output in the Map List of the admin dashboard, leading to an authenticated Stored Cross-Site Scripting issue
Impacted Vendors
Reference Links
http://packetstormsecurity.com/files/163261/WordPress-WP-Google-Maps-8.1.11-Cross-Site-Scripting.html
https://wpscan.com/vulnerability/1270588c-53fe-447e-b83c-1b877dc7a954
http://packetstormsecurity.com/files/163261/WordPress-WP-Google-Maps-8.1.11-Cross-Site-Scripting.html
https://wpscan.com/vulnerability/1270588c-53fe-447e-b83c-1b877dc7a954
CVSS v3.1
Source Entity
[email protected]
Severity
MEDIUM
5.4
Attack Vector
NETWORK
Complexity
LOW
Privileges
N/A
Interaction
REQUIRED
Confidentiality
N/A
Integrity
N/A
Availability
N/A
Scope
CHANGED
RAW VECTOR
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS v2.0
Source Entity
[email protected]
Severity
LOW
3.5
Access Vector
N/A
Authentication
N/A
RAW VECTOR
AV:N/AC:M/Au:S/C:N/I:P/A:N
Associated Attack Patterns (CAPEC)
Total: PatternsNo specific attack patterns mapped.
Likelihood
Severity
Page /
CVE-2021-24383 Exploits & PoCs (Proof Of Concept)
Exploit-DB
https://www.exploit-db.com/exploits/50051
MODIFIED
Vulnerability data or affected products updated.
PUBLISHED
Vulnerability first announced in NVD.
Attack Vector Matrix
Access Vector
NETWORK
Complexity
LOW
Privileges
N/A
Interaction
REQUIRED
CVSS Vector String
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Affected Stack
No specific products linked.