CVE-2023-6627 — WP Go Maps < 9.0.28 - Unauthenticated Stored XSS
The WP Go Maps (formerly WP Google Maps) WordPress plugin before 9.0.28 does not properly protect most of its REST API routes, which attackers can abuse to store malicious HTML/…
Published: 2024-01-08 · CVSS: 6.1 · CVSS 3.1
The WP Go Maps (formerly WP Google Maps) WordPress plugin before 9.0.28 does not properly protect most of its REST API routes, which attackers can abuse to store malicious HTML/Javascript on the site.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7