Vulnerability Details CVE-2021-24468
The Leaflet Map WordPress plugin before 3.0.0 does not escape some shortcode attributes before they are used in JavaScript code or HTML, which could allow users with a role as low as Contributors to exploit stored XSS issues
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 40.1%
CVSS Severity
CVSS v3 Score 5.4
CVSS v2 Score 3.5
References
Products affected by CVE-2021-24468
-
cpe:2.3:a:bozdoz:leaflet_map:1.0
-
cpe:2.3:a:bozdoz:leaflet_map:1.1
-
cpe:2.3:a:bozdoz:leaflet_map:1.10
-
cpe:2.3:a:bozdoz:leaflet_map:1.11
-
cpe:2.3:a:bozdoz:leaflet_map:1.12
-
cpe:2.3:a:bozdoz:leaflet_map:1.13
-
cpe:2.3:a:bozdoz:leaflet_map:1.14
-
cpe:2.3:a:bozdoz:leaflet_map:1.15
-
cpe:2.3:a:bozdoz:leaflet_map:1.16
-
cpe:2.3:a:bozdoz:leaflet_map:1.2
-
cpe:2.3:a:bozdoz:leaflet_map:1.3
-
cpe:2.3:a:bozdoz:leaflet_map:1.4
-
cpe:2.3:a:bozdoz:leaflet_map:1.5
-
cpe:2.3:a:bozdoz:leaflet_map:1.6
-
cpe:2.3:a:bozdoz:leaflet_map:1.7
-
cpe:2.3:a:bozdoz:leaflet_map:1.8
-
cpe:2.3:a:bozdoz:leaflet_map:1.9
-
cpe:2.3:a:bozdoz:leaflet_map:2.0
-
cpe:2.3:a:bozdoz:leaflet_map:2.0.1
-
cpe:2.3:a:bozdoz:leaflet_map:2.0.2
-
cpe:2.3:a:bozdoz:leaflet_map:2.1.0
-
cpe:2.3:a:bozdoz:leaflet_map:2.10.0
-
cpe:2.3:a:bozdoz:leaflet_map:2.10.1
-
cpe:2.3:a:bozdoz:leaflet_map:2.11.0
-
cpe:2.3:a:bozdoz:leaflet_map:2.11.1
-
cpe:2.3:a:bozdoz:leaflet_map:2.11.2
-
cpe:2.3:a:bozdoz:leaflet_map:2.11.3
-
cpe:2.3:a:bozdoz:leaflet_map:2.11.4
-
cpe:2.3:a:bozdoz:leaflet_map:2.11.5
-
cpe:2.3:a:bozdoz:leaflet_map:2.12.0
-
cpe:2.3:a:bozdoz:leaflet_map:2.13.0
-
cpe:2.3:a:bozdoz:leaflet_map:2.14.0
-
cpe:2.3:a:bozdoz:leaflet_map:2.15.0
-
cpe:2.3:a:bozdoz:leaflet_map:2.16.0
-
cpe:2.3:a:bozdoz:leaflet_map:2.16.1
-
cpe:2.3:a:bozdoz:leaflet_map:2.16.2
-
cpe:2.3:a:bozdoz:leaflet_map:2.17.0
-
cpe:2.3:a:bozdoz:leaflet_map:2.17.1
-
cpe:2.3:a:bozdoz:leaflet_map:2.17.2
-
cpe:2.3:a:bozdoz:leaflet_map:2.17.3
-
cpe:2.3:a:bozdoz:leaflet_map:2.18.0
-
cpe:2.3:a:bozdoz:leaflet_map:2.19.0
-
cpe:2.3:a:bozdoz:leaflet_map:2.19.1
-
cpe:2.3:a:bozdoz:leaflet_map:2.2.0
-
cpe:2.3:a:bozdoz:leaflet_map:2.20.0
-
cpe:2.3:a:bozdoz:leaflet_map:2.21.0
-
cpe:2.3:a:bozdoz:leaflet_map:2.22.0
-
cpe:2.3:a:bozdoz:leaflet_map:2.22.1
-
cpe:2.3:a:bozdoz:leaflet_map:2.23.0
-
cpe:2.3:a:bozdoz:leaflet_map:2.23.1
-
cpe:2.3:a:bozdoz:leaflet_map:2.23.2
-
cpe:2.3:a:bozdoz:leaflet_map:2.23.3
-
cpe:2.3:a:bozdoz:leaflet_map:2.3.0
-
cpe:2.3:a:bozdoz:leaflet_map:2.4.0
-
cpe:2.3:a:bozdoz:leaflet_map:2.5.0
-
cpe:2.3:a:bozdoz:leaflet_map:2.6.0
-
cpe:2.3:a:bozdoz:leaflet_map:2.7.0
-
cpe:2.3:a:bozdoz:leaflet_map:2.7.1
-
cpe:2.3:a:bozdoz:leaflet_map:2.7.2
-
cpe:2.3:a:bozdoz:leaflet_map:2.7.3
-
cpe:2.3:a:bozdoz:leaflet_map:2.7.4
-
cpe:2.3:a:bozdoz:leaflet_map:2.7.5
-
cpe:2.3:a:bozdoz:leaflet_map:2.7.6
-
cpe:2.3:a:bozdoz:leaflet_map:2.7.7
-
cpe:2.3:a:bozdoz:leaflet_map:2.7.8
-
cpe:2.3:a:bozdoz:leaflet_map:2.8.0
-
cpe:2.3:a:bozdoz:leaflet_map:2.8.1
-
cpe:2.3:a:bozdoz:leaflet_map:2.8.2
-
cpe:2.3:a:bozdoz:leaflet_map:2.8.3
-
cpe:2.3:a:bozdoz:leaflet_map:2.8.4
-
cpe:2.3:a:bozdoz:leaflet_map:2.8.5
-
cpe:2.3:a:bozdoz:leaflet_map:2.8.6
-
cpe:2.3:a:bozdoz:leaflet_map:2.9.1