CVE-2023-27618

Description

References

• patchstack.com/database/vulnerability/agile-store-locator/wordpress-store-locator-wordpress-plugin-1-4-9-cross-site-scripting-xss-vulnerability · Third Party Advisory

Mais vulnerabilidades de store locator

• CVE-2023-4151MÉDIO 6.1The Store Locator WordPress plugin before 1.4.13 does not sanitise and escape an invalid nonce before outputting it back in an AJAX response…
• CVE-2022-4832MÉDIO 5.4The Store Locator WordPress plugin before 1.4.9 does not validate and escape some of its shortcode attributes before outputting them back in…
• CVE-2022-41615MÉDIO 6.1Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability in Store Locator plugin <= 1.4.5 on WordPress.