CVE-2021-24290
Assigner: WPScan
Published: 2021-05-17T16:48:53
State: PUBLISHED
affected: product: Store Locator Plus for WordPress
vendor: Store Locator Plus®
versions: lessThanOrEqual: 5.5.15
status: affected
version: 5.5.15
versionType: custom
credits: value: Chloe Chamberland
descriptions: value: There are several endpoints in the Store Locator Plus for WordPress plugin through 5.5.15 that could allow unauthenticated attackers the ability to inject malicious JavaScript into pages.
problemTypes: descriptions: cweId: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
type: CWE
source: discovery: UNKNOWN
title: Store Locator Plus <= 5.5.15 - Unauthenticated Stored Cross-Site Scripting (XSS)
x_generator: WPScan CVE Generator