CVE-2021-24274 | BDVDB-2026-153149 Detail

SupsysticUltimate Maps by Supsystic

Description#

The Ultimate Maps by Supsystic WordPress plugin before 1.2.5 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue

Impact#

No impact statement in the source data.

Weaknesses#

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

https://wpscan.com/vulnerability/200a3031-7c42-4189-96b1-bed9e0ab7c1d
http://packetstormsecurity.com/files/164316/WordPress-Ultimate-Maps-1.2.4-Cross-Site-Scripting.html

Exploit#

No public exploit known

History#

Version 12021-05-05Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.