Log out
Get PRO

Latest

Input validation vulnerability in WP GPX Maps 1.7.08

  • Severity: medium-risk
  • Status: Open
  • Publication: September 24, 2024

The WP GPX Maps plugin for WordPress has a security issue where it is vulnerable to a type of cyber attack called Stored Cross-Site Scripting. This can happen when using the ‘sgpx’ feature in the plugin, and it affects all versions up to 1.7.08. This is because the plugin does not properly filter or protect user-provided information, which allows attackers with certain levels of access to insert harmful code into pages. This code will then run whenever someone visits the affected page.

Detected in:

WP GPX Maps open vulnerable versions: >= * <= 1.7.08

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.