Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-55662
HistoryJun 22, 2022 - 12:00 a.m.

WordPress plugin Inline Google Maps cross-site request forgery vulnerability

2022-06-2200:00:00
China National Vulnerability Database
www.cnvd.org.cn
11
wordpress
google maps
csrf
php
mysql
cross-site scripting

EPSS

0.001

Percentile

26.3%

WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blogging sites on servers with PHP and MySQL. WordPress plugin Inline Google Maps 5.11 and earlier versions are vulnerable to cross-site request forgery, which stems from not performing CSRF checks when updating its settings. An attacker could exploit the vulnerability through a CSRF attack to allow logged-in administrators to change them and sanitize and escape due to a lack of stored cross-site scripting.

EPSS

0.001

Percentile

26.3%