WordPress Plugin MapPress <2.73.4 - Cross-Site Scripting
WordPress Plugin MapPress before version 2.73.4 does not sanitize and escape the 'mapid' parameter before outputting it back in the "Bad mapid" error message, leading to reflected cross-site scripting.
mappressPoC 已收录
CVSS6.1EPSS 4.3%