CVE-2019-14792

Name of the Vulnerable Software and Affected Versions WP Google Maps plugin versions prior to 7.11.35

Description The issue allows for XSS attacks via the "wp-admin/" endpoint, specifically through the rectangle name or rectangle opacity parameters.

Recommendations For versions prior to 7.11.35, update to version 7.11.35 or later to resolve the issue. As a temporary workaround, consider restricting access to the "wp-admin/" endpoint or avoiding the use of the rectangle name and rectangle opacity parameters until the update is applied.