Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2021-46780

Description

The Easy Google Maps WordPress plugin before 1.9.32 does not escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting

POC

Reference

- https://wpscan.com/vulnerability/cba4ccdd-9331-4ca0-b910-8f427ed9b540

Github

- https://github.com/20142995/nuclei-templates