CVE-2022-41615

概要

参考情報

• patchstack.com/database/vulnerability/agile-store-locator/wordpress-store-locator-plugin-1-4-5-cross-site-scripting-xss-via-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory
• wordpress.org/plugins/agile-store-locator · Third Party Advisory

store locator のその他の脆弱性

• CVE-2023-4151中 6.1The Store Locator WordPress plugin before 1.4.13 does not sanitise and escape an invalid nonce before outputting it back in an AJAX response…
• CVE-2023-27618中 4.8Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in AGILELOGIX Store Locator WordPress plugin <= 1.4.9 versions.
• CVE-2022-4832中 5.4The Store Locator WordPress plugin before 1.4.9 does not validate and escape some of its shortcode attributes before outputting them back in…