PT-2026-53041 · WordPress · Codepeople Post Map For Google Maps
CVSS v3.1
6.4
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
CodePeople Post Map for Google Maps versions prior to 1.2.7
Description
Insufficient input sanitization and output escaping allow authenticated attackers with Contributor-level access and above to perform Stored Cross-Site Scripting. This is achieved by injecting arbitrary web scripts via the
cpm point Post Meta, which execute when a user accesses the affected page.Recommendations
Update CodePeople Post Map for Google Maps to version 1.2.7 or later.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Codepeople Post Map For Google Maps