NVD

Id
34619  
Name
CVE-2014-7182  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the WP Google Maps plugin before 6.0.27 for WordPress allow remote attackers to inject arbitrary web script or HTML via the poly_id parameter in an (1) edit_poly, (2) edit_polyline, or (3) edit_marker action in the wp-google-maps-menu page to wp-admin/admin.php.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-10-22  
Modified Date
2015-11-27  
Seq
2014-7182  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
178331 34619 CVE-2014-7182 http://packetstormsecurity.com/files/128694/WordPress-WP-Google-Maps-6.0.26-Cross-Site-Scripting.html  View
178332 34619 CVE-2014-7182 20141015 Multiple Cross-Site Scripting (XSS) in WP Google Maps WordPress Plugin  View
178333 34619 CVE-2014-7182 70597  View
178334 34619 CVE-2014-7182 https://wordpress.org/plugins/wp-google-maps/changelog  View
178335 34619 CVE-2014-7182 https://www.htbridge.com/advisory/HTB23236  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16181 JVNDB-2014-005056 WordPress 用 WP Google Maps プラグインにおけるクロスサイトスクリプティングの脆弱性 WordPress 用 WP Google Maps プラグインには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-7182 74474 CVE-2014-7182 34619 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005056.html 2014-09-29 2014-10-28 View