Agilelogix: >> Store Locator >> 1.4.10 Security Vulnerabilities
The Store Locator WordPress plugin before 1.4.13 does not sanitise and escape an invalid nonce before outputting it back in an AJAX response, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVSS Score
6.1
EPSS Score
0.115
Published
2023-09-04