CVE-2021-24274 Ultimate Maps by Supsystic < 1.2.5 - Reflected Cross-Site scripting (XSS)

2021-05-0518:28:48

CWE-79

WPScan

www.cve.org

0.002 Low

EPSS

Percentile

59.9%

JSON

The Ultimate Maps by Supsystic WordPress plugin before 1.2.5 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue

CNA Affected

[
  {
    "product": "Ultimate Maps by Supsystic",
    "vendor": "Supsystic",
    "versions": [
      {
        "lessThan": "1.2.5",
        "status": "affected",
        "version": "1.2.5",
        "versionType": "custom"
      }
    ]
  }
]