Security Advisory

CVE-2021-24468

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-08-02 10:32:11
Last updated 2024-08-03 19:35:18
Assigner WPScan
CVSS score not scored
State PUBLISHED

Description

The Leaflet Map WordPress plugin before 3.0.0 does not escape some shortcode attributes before they are used in JavaScript code or HTML, which could allow users with a role as low as Contributors to exploit stored XSS issues