Lucene search
Lana CodesWPEX-ID:1453471F-164D-4487-A736-8CEA086212FEHistoryFeb 13, 2023 - 12:00 a.m.
UpQode Google Maps <= 1.0.5 - Contributor+ Stored XSS
2023-02-1300:00:00
Lana Codes
99
stored xss
exploit
contributor
wpbakery page builder
EPSS
0
Percentile
14.0%
The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Exploit: [vc_ugm_map map_height='100px; background:red;" onmouseover="alert(1)"']
Note: WPBakery Page Builder plugin is required. Related
wpvulndb
wpvulndb
UpQode Google Maps <= 1.0.5 - Contributor+ Stored XSS
2023-02-13 00:00:00
vulnrichment
vulnrichment
CVE-2023-0094 UpQode Google Maps <= 1.0.5 - Contributor+ Stored XSS
2024-01-16 15:55:46
prion
prion
Cross site scripting
2024-01-16 16:15:00
nvd
nvd
CVE-2023-0094
2024-01-16 16:15:10
cvelist
cvelist
CVE-2023-0094 UpQode Google Maps <= 1.0.5 - Contributor+ Stored XSS
2024-01-16 15:55:46
cve
cve
CVE-2023-0094
2024-01-16 16:15:10