Ultimate Maps by Supsystic, CVE-2021-24274

CVE, Research URL: CVE-2021-24274
Home page URL: Security reports for Ultimate Maps by Supsystic
Application: Ultimate Maps by Supsystic
Published on: May 06, 2021
Research Description: The Ultimate Maps by Supsystic WordPress plugin before 1.2.5 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue
Affected versions: max 1.1.17.
Status: vulnerable