VDB
CVE-2023-4887
CVE-2023-4887
PUBLISHED
CVSS 6.400000095367432 MEDIUM
The Google Maps Plugin by Intergeo for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'intergeo' shortcode in versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
EPSS 0.39% · 33.5th percentile
Risk Scores
CVSS 3.1
6.400000095367432
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
EPSS Score
0.39%
33.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| themeisle | Google Maps Plugin by Intergeo | *, 0 |
| themeisle | google_maps_plugin_by_intergeo | 0, 0 |
Timeline
- Sep 12, 2023 EPSS Score
- Sep 12, 2023 CVE Published
- Oct 15, 2023 EPSS Score
- Nov 17, 2023 EPSS Score
- Dec 19, 2023 EPSS Score
- Jan 21, 2024 EPSS Score
- Feb 23, 2024 EPSS Score
- Mar 27, 2024 EPSS Score
- Apr 4, 2024 CVE Updated
- Apr 28, 2024 EPSS Score
- May 31, 2024 EPSS Score
- Jul 3, 2024 EPSS Score