PT-2021-20619
CVE-2021-34651
·
تاريخ النشر
2021-08-16
·
تاريخ التحديث
2021-08-23
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
Scribble Maps WordPress plugin versions up to and including 1.2
Description:
The issue concerns Reflected Cross-Site Scripting, allowing attackers to inject arbitrary web scripts via the
map parameter in the ~/includes/admin.php file. This enables the execution of malicious scripts.Recommendations:
For versions up to and including 1.2, update to a version that includes a fix for this issue to prevent Reflected Cross-Site Scripting attacks. As a temporary workaround, consider restricting access to the ~/includes/admin.php file or disabling the
map parameter to minimize the risk of exploitation.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾