CVE-2022-41615

Description

References

• patchstack.com/database/vulnerability/agile-store-locator/wordpress-store-locator-plugin-1-4-5-cross-site-scripting-xss-via-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory
• wordpress.org/plugins/agile-store-locator · Third Party Advisory

Weitere Schwachstellen in store locator

• CVE-2023-4151MITTEL 6.1The Store Locator WordPress plugin before 1.4.13 does not sanitise and escape an invalid nonce before outputting it back in an AJAX response…
• CVE-2023-27618MITTEL 4.8Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in AGILELOGIX Store Locator WordPress plugin <= 1.4.9 versions.
• CVE-2022-4832MITTEL 5.4The Store Locator WordPress plugin before 1.4.9 does not validate and escape some of its shortcode attributes before outputting them back in…