MapifyLite (by MapifyPro), 6be590d56cf666ad67a6e008b71242e607d966ea

CVE, Research URL: 6be590d56cf666ad67a6e008b71242e607d966ea
Home page URL: Security reports for MapifyLite (by MapifyPro)
Application: MapifyLite (by MapifyPro)
Published on: Mar 24, 2021
Research Description: MapifyLite (by MapifyPro) [mapifylite] < 4.0.0 MapifyLite and MapifyPro <= 3.3 - Authenticated Stored Cross-Site Scripting The MapifyLite and MapifyPro plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.3 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Affected versions: max 4.0.0.
Status: vulnerable