CVE-2018-17947

The Snazzy Maps plugin before 1.1.5 for WordPress has XSS via the text or tab parameter.

CVSS v3.0

6.1 MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

1.21% chance of exploitation in the next 30 days, 66th percentile

Published

2018-10-03

Updated

2024-09-17

Proof-of-concept exploits (1)

• http://www.defensecode.com/advisories/DC-2018-05-006_WordPress_Snazzy_Maps_Plugin_Advisor…

References

• CVE Record
• NVD entry

Related

• CVE-2018-17936
• CVE-2018-17961
• CVE-2018-17934
• CVE-2018-17974
• CVE-2018-17916
• CVE-2018-17975