cvelist/2021/24xxx/CVE-2021-24383.json

{
    "CVE_data_meta": {
        "ID": "CVE-2021-24383",
        "ASSIGNER": "contact@wpscan.com",
        "STATE": "PUBLIC",
        "TITLE": "WP Google Maps < 8.1.12 - Authenticated Stored Cross-Site Scripting (XSS)"
    },
    "data_format": "MITRE",
    "data_type": "CVE",
    "data_version": "4.0",
    "generator": "WPScan CVE Generator",
    "affects": {
        "vendor": {
            "vendor_data": [
                {
                    "vendor_name": "WP Google Maps",
                    "product": {
                        "product_data": [
                            {
                                "product_name": "WP Google Maps",
                                "version": {
                                    "version_data": [
                                        {
                                            "version_affected": "<",
                                            "version_name": "8.1.12",
                                            "version_value": "8.1.12"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                }
            ]
        }
    },
    "description": {
        "description_data": [
            {
                "lang": "eng",
                "value": "The WP Google Maps WordPress plugin before 8.1.12 did not sanitise, validate of escape the Map Name when output in the Map List of the admin dashboard, leading to an authenticated Stored Cross-Site Scripting issue"
            }
        ]
    },
    "references": {
        "reference_data": [
            {
                "refsource": "CONFIRM",
                "url": "https://wpscan.com/vulnerability/1270588c-53fe-447e-b83c-1b877dc7a954",
                "name": "https://wpscan.com/vulnerability/1270588c-53fe-447e-b83c-1b877dc7a954"
            },
            {
                "refsource": "MISC",
                "name": "http://packetstormsecurity.com/files/163261/WordPress-WP-Google-Maps-8.1.11-Cross-Site-Scripting.html",
                "url": "http://packetstormsecurity.com/files/163261/WordPress-WP-Google-Maps-8.1.11-Cross-Site-Scripting.html"
            }
        ]
    },
    "problemtype": {
        "problemtype_data": [
            {
                "description": [
                    {
                        "value": "CWE-79 Cross-site Scripting (XSS)",
                        "lang": "eng"
                    }
                ]
            }
        ]
    },
    "credit": [
        {
            "lang": "eng",
            "value": "Mohammed Adam"
        }
    ],
    "source": {
        "discovery": "UNKNOWN"
    }
}