MapifyLite (by MapifyPro), e5bfd53d-0d9a-42f2-8af8-5bb710bac828
- CVE, Research URL
- Home page URL
- Application
- Published on
- -
- Research Description
- MapifyLite (by MapifyPro) [mapifylite] < 4.0.0 MapifyLite & MapifyPro < 4.0.0 - Authenticated Stored Cross-Site Scripting (XSS) The plugin does not sanitise the Image URL (either in the settings or in a location), allowing editor+ users to use a malicious payload, leading to Stored Cross-Site Scripting issues. Notes (WPScanTeam): - The vendor has been notified on March 24th, 2021 - April 3rd, 2021 - v4.0.0 released of MapifyLite and MapifyPro, fixing the issue
- Affected versions
-
max 4.0.0.
- Status
-
vulnerable