CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-1123

The Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) WordPress plugin before 3.12.5 does not properly sanitize some parameters before inserting them into SQL queries. As a result, high privilege users could perform SQL injection attacks.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 52.9%

CVSS Severity

CVSS v3 Score 7.2

References

Products affected by CVE-2022-1123

Mapsmarker » Leaflet Maps Marker » Version: N/A

cpe:2.3:a:mapsmarker:leaflet_maps_marker:-
Mapsmarker » Leaflet Maps Marker » Version: 3.11

cpe:2.3:a:mapsmarker:leaflet_maps_marker:3.11
Mapsmarker » Leaflet Maps Marker » Version: 3.11.1

cpe:2.3:a:mapsmarker:leaflet_maps_marker:3.11.1
Mapsmarker » Leaflet Maps Marker » Version: 3.11.2

cpe:2.3:a:mapsmarker:leaflet_maps_marker:3.11.2
Mapsmarker » Leaflet Maps Marker » Version: 3.12

cpe:2.3:a:mapsmarker:leaflet_maps_marker:3.12
Mapsmarker » Leaflet Maps Marker » Version: 3.12.1

cpe:2.3:a:mapsmarker:leaflet_maps_marker:3.12.1
Mapsmarker » Leaflet Maps Marker » Version: 3.12.2

cpe:2.3:a:mapsmarker:leaflet_maps_marker:3.12.2
Mapsmarker » Leaflet Maps Marker » Version: 3.12.3

cpe:2.3:a:mapsmarker:leaflet_maps_marker:3.12.3
Mapsmarker » Leaflet Maps Marker » Version: 3.12.4

cpe:2.3:a:mapsmarker:leaflet_maps_marker:3.12.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-1123

Products

Pricing

Contact Us