CVE-2023-4887
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Published Sep 12, 2023
Updated: Nov 7, 2023
Summary
CVE-2023-4887 is a Stored Cross-Site Scripting (XSS) vulnerability affecting the Google Maps Plugin by Intergeo for WordPress. This issue, present in versions up to 2.3.2, allows authenticated attackers with contributor-level access and above to inject malicious scripts. The vulnerability stems from insufficient input sanitization and output escaping on user-supplied attributes within the 'intergeo' shortcode. As a result, any page containing this shortcode becomes a threat, executing the injected scripts whenever a user accesses the page.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.