漏洞描述
WordPress Hero Maps Premium plugin 2.2.1 and prior contains an unauthenticated reflected cross-site scripting vulnerability via the views/dashboard/index.php p parameter.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
wpscan.comhttps://wpscan.com/vulnerability/d179f7fe-e3e7-44b3-9bf8-aab2e90dbe01↗www.hooperlabs.xyzhttps://www.hooperlabs.xyz/disclosures/cve-2019-19134.php↗heroplugins.comhttps://heroplugins.com/product/maps/↗heroplugins.comhttps://heroplugins.com/changelogs/hmaps/changelog.txt↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2019-19134↗