CVE-2015-7668

Cross-site scripting (XSS) vulnerability in includes/MapPinImageSave.php in the Easy2Map plugin before 1.3.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the map_id parameter.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2017-12-27

Last modified

2024-08-06

Weaknesses

CWE-79

Affected products

• Easy2map (Easy2map)

References

• http://www.securityfocus.com/archive/1/536598/100/0/threaded
• https://wordpress.org/plugins/easy2map/#developers
• https://wpvulndb.com/vulnerabilities/8205